Remove cookies, Authorization headers and tokens from a HAR before sending it to support
Processed in your browser. Nothing is uploaded. Checked against sources on 17 Oct 2026.A HAR file records everything the browser sent, including session cookies and login tokens, so sharing one can hand over your account. Drop it here and download a clean copy: every cookie value, Authorization and API-key header, token in a URL and password in a form is replaced with [removed], while timings, sizes and status codes stay for the support team. Nothing is uploaded.
Drop your files or click to choose them.
Adjust the options and check the preview.
Download the result. Nothing was uploaded.
A HAR (HTTP Archive) file is what a browser's network panel saves: every request a page made, with headers, sizes and timings. Support teams ask for one when a site misbehaves, and developers save them to find what is slow. Opening one usually means loading it back into developer tools; this page reads it directly.
| Figure | Where it comes from |
|---|---|
| Requests, transferred, size | Each entry's transfer size (or headers plus body), and the decoded size |
| Load | The page's onLoad time, and the span from the first request to the last response |
| Slowest 10 and largest 10 | Each entry's total time and transfer size |
| Failed and redirected | Status 0 (blocked or cancelled), 4xx and 5xx; 3xx |
| By type and by domain | Document, script, style, image, font, media, XHR; each host with its requests and bytes |
Share it safely. A HAR holds your cookies and login tokens in plain text. Download clean HAR replaces every cookie value, the Authorization, Cookie, Set-Cookie, API-key and CSRF headers, tokens, codes, signatures and passwords in URLs and form posts with [removed]. Bodies can be removed too. Status codes, timings and sizes stay, so the copy still shows the problem.
The rest of the article, and all 6 questions about HAR File Viewer, are on the HAR File Viewer page.
Drop the .har file on HAR File Viewer. The number of requests, the data transferred, the load time, the slowest and largest requests, failures and the domains contacted appear at once, read in your browser. No developer tools or extension are needed, and it works on any computer or phone.
Open the page, press F12 to open developer tools and choose the Network tab. Reload the page so every request is recorded, then right-click the request list and choose Save all as HAR with content. Firefox calls it Save All As HAR; Safari, Export HAR.
Not as saved: a HAR includes your cookies and login tokens, which can let someone use your account. Download clean HAR here first. Cookie values, Authorization and API-key headers, and tokens or passwords in URLs and forms are replaced with [removed], while timings and status codes stay.
No. The file is read by your own browser, and the CSV and the clean copy are written on your device. A HAR holds private data such as cookies and the pages you visited, and none of it reaches a server.
Rates and rules change; check the source before you rely on a figure.
Still stuck? Ask about HAR File Viewer and anybody who knows can answer. No account needed.
Same job, other tools: Remove Timestamp from File Names – Strip the date and time from hundreds of file names in one go · Flow Video Renamer – Rename Google Flow clips in story order, without their timestamps.