JavaScript Deobfuscator
Make hidden JavaScript readable: unpack eval(function(p,a,c,k,e,d)…) packers, decode \x41 and \u0041 strings, and beautify the result. The code is decoded as text — it is never run.
Runs in your browser — your code is never uploaded. Tip: drop a file on the input box, or press Ctrl + Enter.
How to Deobfuscate JavaScript
Read hidden or packed JavaScript in three steps.
Paste the Code
Paste the obfuscated JavaScript or upload a .js file.
Pick What to Decode
Keep Unpack eval packers and Decode strings on for most files.
Read, Copy or Download
See what was done in the message, then copy or download the readable code.
Unpacks
p,a,c,k,e,d packers
Decodes
\x, \u escapes
Safe
Code is never run
Privacy
Runs in your browser
Works on
Phone & computer
Price
100% free
What the Deobfuscator Can Undo
Common tricks used to hide JavaScript.
| Trick | Example | Result |
|---|---|---|
| Eval packer (Dean Edwards) | eval(function(p,a,c,k,e,d){…}) | Original source unpacked |
| Hex escapes | "\x48\x69" | "Hi" |
| Unicode escapes | "\u0048\u0069" | "Hi" |
| Minified one-liners | if(a){b()}else{c()} | Indented, readable code |
Renamed variables (_0x3f2a) | var _0x3f2a=… | Formatted, but names cannot be recovered |
What Can You Use It For?
Popular ways people use JavaScript Deobfuscator.
Security Checks
Look inside suspicious scripts found on a website or in an email.
Debugging
Read packed third-party code that breaks your page.
Learning
Understand how obfuscation works.
Recover Your Code
Read your own old packed scripts when the source is lost.
Tips for the Best Result
- This tool never runs the code — packers are decoded as text, so it is safe for suspicious scripts.
- Heavily obfuscated code (string arrays, control-flow flattening) can be made more readable, but not fully restored.
- Only deobfuscate code you are allowed to inspect, and respect software licences.
- To protect your own code, use the JavaScript Obfuscator.
Frequently Asked Questions
Quick answers about JavaScript Deobfuscator.
A tool that reverses common tricks used to hide JavaScript — packing, escaped strings and minification — so the code can be read.
Yes. The code is only processed as text and is never executed. The packer is decoded by our own parser, not by eval().
Yes. Dean Edwards' packer is fully unpacked, including code packed several times.
Partly. Strings and formatting become readable, but hex variable names like _0x3f2a and control-flow changes cannot be fully undone.
Original names are removed when code is minified or obfuscated, so no tool can bring them back.
The beautifier only formats. The deobfuscator also unpacks and decodes first.
No. Everything runs in your web browser, so your code and data never leave your device.
Yes — 100% free, with no sign-up and no limits.
Related Free Tools
Ready to Use JavaScript Deobfuscator?
Scroll up and get your result in seconds. 100% free, no sign-up needed.
Start Now