RunOfflineTools Logo RunOfflineTools
📁 Network Debugging & Log Privacy

HAR File Sanitizer & Redactor

Safely scrub session cookies, Bearer authorization tokens, and confidential API keys from .har network captures before sharing with third-party vendors.

🔒 100% Client-Side HAR Redaction: Network files are sanitized locally in JavaScript before you share them.
3
Auth Headers Redacted
2
Cookies Stripped
1
Secret Query Params
1
Total HTTP Requests
Raw .HAR File Content
Sanitized Safe .HAR
{
  "log": {
    "version": "1.2",
    "creator": {
      "name": "WebInspector",
      "version": "537.36"
    },
    "entries": [
      {
        "startedDateTime": "2025-03-01T10:00:00.000Z",
        "time": 120,
        "request": {
          "method": "POST",
          "url": "https://api.example.com/v1/auth/login?client_id=web&secret=my_secret_token_123",
          "headers": [
            {
              "name": "Host",
              "value": "api.example.com"
            },
            {
              "name": "Authorization",
              "value": "[REDACTED_BY_TEXTTOOLS]"
            },
            {
              "name": "Cookie",
              "value": "[REDACTED_BY_TEXTTOOLS]"
            },
            {
              "name": "Content-Type",
              "value": "application/json"
            }
          ],
          "cookies": [
            {
              "name": "session_id",
              "value": "[REDACTED_COOKIE]"
            }
          ],
          "queryString": [
            {
              "name": "client_id",
              "value": "web"
            },
            {
              "name": "secret",
              "value": "[REDACTED_PARAM]"
            }
          ]
        },
        "response": {
          "status": 200,
          "statusText": "OK",
          "headers": [
            {
              "name": "Set-Cookie",
              "value": "[REDACTED_BY_TEXTTOOLS]"
            }
          ],
          "cookies": [
            {
              "name": "session_id",
              "value": "[REDACTED_COOKIE]"
            }
          ]
        }
      }
    ]
  }
}

Securely Sharing Network Logs Without Credential Leaks

When debugging complex frontend network errors or CDN issues with external support teams, providing a .har capture is indispensable. However, raw HAR files contain live session cookies and OAuth access tokens that grant full account access.

Our HAR Sanitizer automatically scans every HTTP request and response in the log, redacting authentication headers, session cookies, and sensitive query tokens while preserving HTTP status codes, headers, and payload structures needed for debugging.

Frequently Asked Questions

Why is it dangerous to share raw .HAR network log files?

HAR (HTTP Archive) files exported from browser developer tools contain unencrypted session cookies, Authorization: Bearer tokens, private API keys, and POST request body payloads, which can allow malicious actors to hijack your user accounts or access protected APIs.

What sensitive fields are redacted by this tool?

Our sanitizer scans and replaces Authorization headers, Cookie and Set-Cookie values, custom API keys (x-api-key, stripe-signature, x-auth-token), sensitive URL query parameters (token, secret, access_token), and form body passwords with safe redacted placeholders.

Is my HAR file uploaded to any remote server?

No. The sanitization process runs 100% locally in your browser JavaScript memory. Your network archive never leaves your device.

How do I export a .HAR file from Google Chrome or Firefox?

Open Chrome Developer Tools (F12) > Go to the 'Network' tab > Reproduce the issue or API request > Click the 'Export HAR' arrow icon (or right-click any request and select 'Save all as HAR with content').

Will sanitizing the HAR file break debugging for support teams?

No! The tool preserves all HTTP status codes (200, 404, 500), request timing waterfalls, DNS lookups, TLS handshake latencies, non-sensitive headers, and response payloads necessary for technical troubleshooting.

Can I sanitize large .HAR files?

Yes, our client-side streaming parser processes HAR files up to several megabytes directly in your browser without lag.