HAR Privacy Sanitizer: practical guide

Remove sensitive HAR payloads and share a cleaner diagnostic capture.

Use the guide alongside the working tool.

Explicit sample

{"log": {"version": "1.2", "creator": {"name": "Sample capture", "version": "1"}, "entries": [{"startedDateTime": "2026-10-28T09:00:00.000Z", "time": 200, "request": {"method": "GET", "url": "https://example.com/", "httpVersion": "HTTP/2", "headers": [{"name": "Authorization", "value": "Bearer SAMPLE_NOT_A_SECRET"}], "cookies": [], "queryString": []}, "response": {"status": 200, "statusText": "OK", "httpVersion": "HTTP/2", "headers": [{"name": "Content-Type", "value": "text/html"}], "cookies": [], "content": {"size": 24000, "mimeType": "text/html", "text": "SAMPLE BODY"}, "bodySize": 12000, "redirectURL": ""}, "cache": {}, "timings": {"blocked": 0, "dns": 10, "connect": 20, "ssl": 10, "send": 2, "wait": 120, "receive": 10}}, {"startedDateTime": "2026-10-28T09:00:01.000Z", "time": 150, "request": {"method": "GET", "url": "https://example.com/assets/app.js?token=sample", "httpVersion": "HTTP/2", "headers": [{"name": "Authorization", "value": "Bearer SAMPLE_NOT_A_SECRET"}], "cookies": [], "queryString": [{"name": "token", "value": "sample"}]}, "response": {"status": 200, "statusText": "OK", "httpVersion": "HTTP/2", "headers": [{"name": "Content-Type", "value": "application/javascript"}], "cookies": [], "content": {"size": 180000, "mimeType": "application/javascript", "text": "SAMPLE BODY"}, "bodySize": 90000, "redirectURL": ""}, "cache": {}, "timings": {"blocked": 0, "dns": 10, "connect": 20, "ssl": 10, "send": 2, "wait": 40, "receive": 10}}, {"startedDateTime": "2026-10-28T09:00:02.000Z", "time": 450, "request": {"method": "GET", "url": "https://example.com/api/items", "httpVersion": "HTTP/2", "headers": [{"name": "Authorization", "value": "Bearer SAMPLE_NOT_A_SECRET"}], "cookies": [], "queryString": []}, "response": {"status": 503, "statusText": "Unavailable", "httpVersion": "HTTP/2", "headers": [{"name": "Content-Type", "value": "application/javascript"}], "cookies": [], "content": {"size": 500, "mimeType": "application/javascript", "text": "SAMPLE BODY"}, "bodySize": 250, "redirectURL": ""}, "cache": {}, "timings": {"blocked": 0, "dns": 10, "connect": 20, "ssl": 10, "send": 2, "wait": 400, "receive": 10}}, {"startedDateTime": "2026-10-28T09:00:03.000Z", "time": 25, "request": {"method": "GET", "url": "https://example.com/logo.svg", "httpVersion": "HTTP/2", "headers": [{"name": "Authorization", "value": "Bearer SAMPLE_NOT_A_SECRET"}], "cookies": [], "queryString": []}, "response": {"status": 200, "statusText": "OK", "httpVersion": "HTTP/2", "headers": [{"name": "Content-Type", "value": "application/javascript"}], "cookies": [], "content": {"size": 3000, "mimeType": "application/javascript", "text": "SAMPLE BODY"}, "bodySize": 1500, "redirectURL": ""}, "cache": {}, "timings": {"blocked": 0, "dns": 10, "connect": 20, "ssl": 10, "send": 2, "wait": 10, "receive": 10}}]}}

Remove sensitive HAR payloads and share a cleaner diagnostic capture.

Prepare your input

Remove sensitive HAR payloads and share a cleaner diagnostic capture.

Use the labeled working sample to see the accepted format. Replace it with your own input, select the relevant options, and run the tool. Supporting controls remain in the bounded editor window.

Understand the result

Removes request/response bodies, cookies, URL credentials/fragments/query strings, unknown headers and nonessential extension fields. Optional stable host/path pseudonyms. Keeps timestamps, HTTP methods/statuses and timings. Review before sharing: retained domains, paths, sizes and timing can still reveal context. The original capture is never overwritten.

Export deliberately

Record exports contain the complete selected dataset; reports summarize up to 100 records. Artifacts contain the actual generated configuration, sanitized capture or compressed bytes. Review configuration before publishing it.

Input stays in browser memory. No remote page fetching, account access or file upload is performed.

Ready to apply this workflow?

Try HAR Privacy Sanitizer →

Explore a related workflow

HAR Network Analyzer: practical guide
Inspect request waterfalls, failures, payloads and network timing.
HTTP Cache Debugger: practical guide
Explain freshness, validators and browser versus shared-cache behavior.
Web Compression Inspector: practical guide
Measure real gzip and deflate savings for your UTF-8 web assets.
User-Agent Decoder: practical guide
Decode common browser, operating-system and crawler markers.

All practical guides →

Keep your original files and review the result. Found unclear instructions? Contact Team Hypomnema.