CyberChef

online Free

gchq.github.io

🇬🇧 United Kingdom

Quick Facts

Open Source

Yes GitHub

Platforms

web

API Available

no

Account

Required

Skill Level

beginner

Offline Capable

Yes

Output Formats

txtjson

Max Input Size

2MB

What it does

Browser-based tool for analyzing and decoding data using a drag-and-drop recipe system. Supports hundreds of operations including Base64, XOR, compression, hashing, encryption, and parsing. Features Magic mode for automatic detection of encoded data, file upload support (up to 2GB), and shareable recipe links. All processing happens client-side—your data never leaves your browser. Developed by GCHQ and released under Apache License 2.0.

Video Tutorial

When to use it

Decoding multi-layer obfuscated malware
Converting between data formats (hex
base64
timestamps)
Hash generation and verification
Certificate and JWT parsing
Building repeatable decode workflows

When not to use it

Real-time traffic interception
Automated scanning
Large-scale batch processing

Limitations

Browser memory limits for very large files
No server-side processing (feature
not bug)
Some operations CPU-intensive in browser

Frequently Asked Questions

Is CyberChef free to use?

Yes, CyberChef is completely free to use with no subscription required.

What is the file size limit for CyberChef?

The maximum file size for CyberChef is 2MB. This limit applies to the free version.

What platforms does CyberChef support?

CyberChef is available on Web (browser).

Does CyberChef require an account?

No, CyberChef does not require an account. You can use it without signing up.

Is CyberChef open source?

Yes, CyberChef is open source. The source code is available on GitHub.

What are the limitations of CyberChef?

Browser memory limits for very large files No server-side processing (feature not bug)

What does CyberChef do?

CyberChef is a web-based tool for code deobfuscation, web code analysis. Browser-based tool for analyzing and decoding data using a drag-and-drop recipe system. Supports hundreds of operations including Base64, XOR, compression, hashing, encryption, and parsing. Features M

Related Tools

DecodePHP

Professional IonCube decoder supporting versions 10 through 15 with PHP 7.1 to 8.4. Upload encrypted PHP files and get readable source code back.

GhostKit Free

A curated directory and browser-based toolkit for security researchers. GhostKit combines 14+ client-side tools — JS deobfuscation, encoding/decoding, URL analysis, email header parsing, hash generation, JWT/SAML decoding, and more — with a comprehensive directory of external security tools.

de4js Free

Browser-based JavaScript deobfuscator supporting 15+ formats including JSFuck, obfuscator.io, and packed code.

Hybrid Analysis Free

Free malware sandbox powered by CrowdStrike Falcon. Upload files up to 250MB for behavioral analysis and threat detection.