Features
- Removes Cookie / Set-Cookie headers and cookie lists.
- Removes Authorization, API-key and CSRF headers.
- Removes tokens, codes and signatures from URLs.
- Removes request bodies (login forms) and optionally response bodies.
- Also hides emails, keys and other secrets anywhere in the file.
How to use it
Save the HAR in your browser (DevTools → Network → "Save all as HAR").
Choose it here, keep the default options and press "Make the HAR safe".
Send the downloaded -sanitized.har file.
Free and private
Everything happens inside your browser: your files are read on your own device and are never uploaded, stored or seen by anyone else.
Questions
Why are HAR files dangerous?
They include session cookies and tokens. Attackers have used shared HAR files to take over accounts.
Can support still use the cleaned file?
Yes - URLs, timings, status codes and errors stay; only secrets are removed.
Is it free?
Yes - free and unlimited, with no sign-up and no watermark.