Self-Hosted / Projects / CyberChef
CyberChef
StableSpecs verified September 16, 2026 · against vlatest
Overview
Browser-based toolkit for encoding, encryption, compression, parsing, hashing, and data analysis.
CyberChef is a browser-based data transformation toolkit often described as the Cyber Swiss Army Knife. It lets analysts and developers build recipes from individual operations for tasks such as Base64 conversion, URL decoding, hashing, compression, parsing, and common cryptographic transformations.
Why people choose CyberChef
The search intent is practical: decode a value, inspect an encoded payload, parse a network artifact, or chain several transformations without installing a collection of separate utilities. Because the application can be served locally, sensitive input can stay in a controlled environment instead of being pasted into an unknown third-party tool.
What is included
The official application currently exposes hundreds of operations across data formats, encryption and encoding, public-key tools, arithmetic and logic, networking, language, utilities, compression, dates, and forensic functions. Recipes can be chained, saved or shared as recipe text, and run in the browser; the repository includes a Dockerfile and build/deployment material.
Requirements and tradeoffs
CyberChef is a client-side web application, so a self-hosted copy needs a web server or container and a modern browser rather than a database. Verify the application behavior and security model for your deployment: browser-side processing reduces server-side handling, but sharing recipe URLs, loading remote resources, or exposing the instance still needs normal access-control and network-hardening decisions.
Best fit
Choose CyberChef for repeatable ad-hoc data transformation, incident-response triage, reverse engineering, and developer utility work. It is not a secrets vault, a general-purpose encryption service, or a substitute for a tested production cryptography library when correctness and key management are critical.
Feature support
| Feature | Support |
|---|---|
| Recipe-based operation chainingThe official app is organized around combining operations into recipes. | Supported |
| Encoding and decodingThe application includes Base64, hex, URL, character-code, and many other format conversions. | Supported |
| Encryption and hashing operationsThe official operation catalog includes symmetric cryptography, public-key tools, hashes, and key derivation operations. | Supported |
| Compression and decompressionCompression operations are included in the official application categories. | Supported |
| Network and forensic parsingThe app includes operations for HTTP, IP, TCP, TLS, SSH keys, fingerprints, URLs, and related analysis. | Supported |
| Regular expressions and data analysisThe utility and data-analysis operation groups include regular expressions, entropy, statistics, and transformations. | Supported |
| Browser-based processingCyberChef is delivered as a web application and is designed for in-browser recipes and transformations. | Supported |
| Offline/self-hosted deploymentThe project is open source and its repository includes build and Docker deployment material for serving a local copy. | Supported |
| Operation support breadthThe app has a large operation catalog, but individual algorithms and formats have different maturity and should be validated for the task. | Partial support |
Community signals
- Stars
- 35.9k
- Forks
- 4.1k
- Open issues
- 595
- Last commit
- 5d ago
- Latest release
- v11.4.0
- Repo created
- Nov 2016
Includes open pull requests
4w ago
Refreshed nightly from the GitHub API.
Questions
What is CyberChef used for?
CyberChef is used to encode, decode, transform, parse, hash, compress, encrypt, and analyze data by chaining operations into browser-based recipes.
Can you self-host CyberChef?
Yes. CyberChef is open source and can be served locally as a web application; the official repository includes deployment and Docker build material.
Does CyberChef send my data to a server?
CyberChef is designed as a browser application and many operations run in the browser, which is why a local copy is useful for sensitive analysis. Still review the deployed build, browser behavior, and any operation that loads external resources before handling confidential data.
Does CyberChef support Base64 and URL decoding?
Yes. The official application lists To/From Base64 and URL Encode/Decode operations among its data-format tools.
Can CyberChef parse network data?
Yes. The official operation catalog includes HTTP, IP, TCP, TLS, SSH-host-key, URI, fingerprint, and related networking operations.
Is CyberChef a secure password or secrets manager?
No. CyberChef is a data transformation toolkit. Do not use it as a secrets vault or as a replacement for a dedicated password manager and key-management system.
Is CyberChef suitable for production cryptography?
It is useful for analysis and repeatable transformations, but production cryptography should use well-reviewed libraries, explicit key management, and tests appropriate to the application rather than relying on an interactive utility alone.
support // the lab
Found this write-up useful?
If it saved you time or a rebuild, you can support more practical homelab guides.