What it does

The URL Inspector decomposes any URL into every WHATWG-defined component: scheme/protocol, origin, host, hostname, port, pathname, search string,

hashhashA one-way function that maps data of any size to a fixed-length digest. Same input, same digest; any change, different digest; not reversible.

, and any embedded credentials. It surfaces the signals the browser’s URL parser hides - whether the port is the scheme’s default (e.g. https → 443), whether the connection is secure, and whether the URL is just a site root. Query parameters are listed individually with an Encoded / Decoded toggle that percent-decodes values (treating + as a space). Everything runs 100% client-side.

How to use it

Paste a URL into the URL box (or hit Sample for a demo with credentials, port, and query).
Read the structured breakdown - each row has a copy button.
Toggle Encoded / Decoded to switch how query-parameter values are shown.
Watch the badges for security, default/custom port, and any warnings (credentials, root-only URL).
Copy share link to send the exact URL + toggle state to a teammate.

Examples

Break down a URL with a query string

Input: https://api.example.com/v1/search?q=hello%20world&lang=en
Result: protocol https:, hostname api.example.com, pathname /v1/search, two params (q, lang) - decoded q = hello world.

Spot credentials and a default port

Input: https://user:pass@example.com:443/
Warnings: username credential, password credential, port 443 is the default for https.

Catch an invalid URL

Input: example.com/path → Invalid URL - include the scheme (e.g. https://).

Good to know

Shareable: the URL and decode toggle are encoded in the link (?u=…&d=…).
Private: parsing happens locally - safe for URLs that may contain tokens or credentials.
Related tools: Email Validator, HTTP Status Codes,
Base64Base64An encoding representing binary data as 64 safe ASCII characters, so it survives transport through text-only channels. It encodes — it does not encrypt.
Encode / Decode.