How to Export a HAR File from iPhone (Safari or Any App)

Support teams often ask for a HAR file when a website or app misbehaves. On a desktop browser you save one from the developer tools. Safari on iPhone has no built-in way to do it, and other apps have none at all. HTTPS Capture records HAR files for any app on the iPhone, including Safari, and needs no computer.

What is a HAR file?

HAR (HTTP Archive) is a standard JSON format that stores a list of requests and responses: URLs, headers, cookies, bodies, status codes and timing. Chrome DevTools, Charles, Fiddler and many online HAR viewers can open it.

Step 1: Record the problem

1. Set up HTTPS Capture once. See how to capture HTTPS traffic on iPhone.
2. Tap Start on the Capture tab.
3. Reproduce the problem in Safari or the app: load the page, tap the failing button, and so on.
4. Return to HTTPS Capture and tap Stop. The recording is saved as a session.

Step 2: Export the HAR

Choose one of these:

• Whole session: open the session list, touch and hold the session, and choose Export Session HAR.
• From the request list: inside a session, tap the HAR export button in the toolbar.
• A single request: open the request, tap the menu in the top-right corner, and choose Export as HAR.

The share sheet opens. Save the file to Files, AirDrop it to your Mac, or attach it to an email. Large sessions are written in the background, so export still works with thousands of requests.

Step 3: Open the HAR file

• Chrome or Edge: open DevTools → Network, then drag the .har file in.
• Charles: choose File → Import and select the HAR.
• On the iPhone itself: Fileso can preview HAR files.

Turn a HAR into a mock backend

HTTPS Capture can import HAR files too. Under Rules → Server Replay, choose Import HAR…. The recorded responses are served back to your app without contacting the real server. See replay recorded API responses offline.

Before you share a HAR file

A HAR contains everything in the recorded requests, including cookies, authorization headers and personal data in bodies. Before you send it:

• Record only the steps you need. Use the URL Filter whitelist to capture just the domains that matter.
• Log out of unrelated accounts, or delete secrets from the file.
• Share it only with people you trust.