HAR File Viewer
Runs locally in your browserInspect HAR network logs as a waterfall or table, with secrets masked
HAR file
Drop a .har or .json file
.har or .json · parsed on this device in a background worker
HAR files can contain authentication headers, cookies and personal data. This viewer processes the file locally and masks detected secrets by default.
The export masks exactly what the viewer masks.
Advanced
Comma-separated header, query, cookie or JSON key names.
Requests
Request details
No HAR file open. Nothing is uploaded.
Related Tools
What HAR File Viewer does
HAR File Viewer opens HTTP Archive (.har) files exported from Chrome, Firefox, Safari, Edge or a debugging proxy and lays out every request as a waterfall or a sortable table. Filter by method, status family, resource type, domain or errors, search URLs and header names, and inspect headers, query parameters, cookies, bodies, responses and timing phases one request at a time. Authorization headers, cookies, tokens and other detected secrets are masked by default.
How to use
- 1.In browser DevTools, open the Network panel, reproduce the problem and choose Save all as HAR.
- 2.Drop the .har file here, choose Open HAR, or paste the JSON under Advanced.
- 3.Use the waterfall or the table to find slow, failed or cached requests; search and filters narrow the list.
- 4.Select a request to inspect headers, query, cookies, bodies, timing and the sanitized raw entry. Reveal a masked value only when you need it.
- 5.Copy the URL or a masked cURL command, or export a sanitized HAR to share.
Privacy and sanitized export
The file is read and parsed in a Web Worker in your browser. Nothing is uploaded, and HAR contents are never written to browser storage; only view preferences are saved. Masking uses the same rules as HAR to Markdown and HAR to OpenAPI: authorization and API key headers, cookies, token-like query parameters, password and token fields in JSON, form and multipart bodies, JWTs, private keys and any extra keys you add. Export Sanitized HAR applies exactly these rules to the original file, so the export never contains a value the viewer masked. Pattern matching can miss unusual secrets, so review a file before sharing it.
Limits
Files over 150 MB ask for confirmation because parsing needs memory proportional to the file. Response bodies appear only when the HAR contains them: images are previewed from embedded base64 data, HTML is shown as source, and scripts never run. Bodies over 1 MB are truncated on screen but can be downloaded in full. Timing phases recorded as -1 are treated as not recorded.
