JavaScript Deobfuscator

JavaScript deobfuscator.
Read the code.

Turn obfuscated JavaScript into code you can understand. Decode packed scripts, inspect threat signals, and take the next step with evidence.

Try the deobfuscator → Open workspace

Static analysis. Your code is never executed.

analysis.js DECODE PREVIEW

01 / Obfuscated input

const _0x4a = ['\\x68\\x65\\x6c\\x6c\\x6f'];
console['\\x6c\\x6f\\x67'](_0x4a[0]);

↓ String decoding + beautification

02 / Readable output

const message = 'hello';
console.log(message);

Try a JavaScript example, then analyze your own code.

Open a preloaded example to compare the input, readable output, and analysis report. The free demo accepts up to 64 KB. Recovery depends on the transformations used; original names and comments may not be recoverable.

Unpack a Packer sample Decode a string-array sample

How Packer unpacking works · Obfuscator.io recovery and limits · Tested recovery guides

Why teams use it

Turn suspicious JavaScript into reviewable evidence.

Defuscator combines a browser demo, authenticated dashboard, API, ZIP batch processing, and a WinUI desktop workflow so analysts can move from a single sample to repeatable triage.

Decode and explain

Beautify packed code, surface suspicious constructs, estimate entropy, extract IOCs, and summarize likely techniques.

Try the online demo

Batch real workloads

Process ZIP archives in the web app or use the WinUI desktop client for folder-based analysis with CSV summaries.

View desktop workflow

Automate with API keys

Generate account-scoped API keys, apply plan limits, track usage, and integrate deobfuscation checks into security pipelines.

Read the docs

Product map

From one script to your whole workflow.

Use the tour for capabilities, compare page for alternatives, docs for implementation details, downloads for desktop batch processing, and security pages for review material.

Techniques we unpack Obfuscator recovery guides Product tour Compare alternatives Build integrations Security and trust Roadmap FAQ

Plans

Start with the demo, then scale with credits.

Starter, Pro, and Max plans cover deeper reports, API access, retained usage history, Stripe orders, invoices, and larger batch archives.

View pricing

The other direction

Shipping JavaScript you need to protect?

Defuscator takes obfuscation apart. If your problem is the opposite one, JavaScript Obfuscator is a commercial obfuscator for code you publish — online tool, desktop app, CLI and build-pipeline plugins.

JavaScript deobfuscator.Read the code.