Skip to content
NSNormandin SystemsTHE EVERYDAY TOOLBOXMain site
⌑

Security / YOUR EVERYDAY TOOLBOX

URL parser

Parse a URL into its separate constituent parts (protocol, origin, params, port, username-password, ...)

✓ Free to use✓ No account neededHow to use this tool ↓
YOUR WORKSPACESee an example ↗

Opening your tool…

Runs in your browser. Check important results and keep a copy of your original files.

THE PRACTICAL GUIDE · NORMANDIN SYSTEMS

Get more from URL parser

URL parser: Parse a URL into its separate constituent parts (protocol, origin, params, port, username-password, ...). Breaking a URL into components clarifies which part controls the destination and which parts provide application-specific context. URLs contain multiple components with different meanings, including the scheme, host, path, query, and fragment. Encoding and decoding those components requires care because reserved characters can act as separators in one position and data in another. Inspect the destination host before following a decoded or generated link, and keep query parameters intact when their values are significant. A syntactically valid URL does not establish that a destination is trustworthy or reachable. Test the resulting link in the intended application without exposing private tokens or credentials in shared examples.

Guide updated October 13, 2026

How to use this tool

  1. Begin with a representative input. For a practical test, use: https://example.com:8443/docs?q=test#part. Replace demonstration values only after you understand the output.
  2. Provide the complete URL or its requested components, preserving percent-encoded characters and the original query string where relevant.
  3. Inspect the scheme, host, path, and parameter values separately, watching for encoded separators or an unexpected destination domain.
  4. Use the reviewed link in its intended context and confirm that the destination receives the expected parameters.

SEE IT IN PRACTICE

A worked example

EXAMPLE INPUT
https://example.com:8443/docs?q=test#part
RESULT / WHAT TO EXPECT
Scheme https, host example.com, port 8443, path /docs, query q=test, fragment part

Pay attention to userinfo before an at-sign because it can make a URL visually misleading.

Decode one layer at a time

A URL can contain percent-encoded component values, an encoded destination inside a wrapper, or an internationalized hostname representation. These are separate layers. Decode only according to the format being inspected, because repeatedly decoding can turn data into separators. Keep the original URL alongside the interpreted components so changes can be traced rather than guessed.

Check both syntax and intended behavior

A valid URL may still point to an unexpected host or carry private access parameters. Inspect the scheme, host, port, and query values before opening or distributing it. Repeated parameters and plus signs can be interpreted differently by applications. For sharing or document links, test the intended recipient experience: decoding a path does not establish permissions, and building a share URL does not publish content.

When this tool is useful

  • Inspect an unfamiliar link
  • Debug query parameters
  • Compare URL components

Tips for a better result

  • A familiar word in a path or query does not make it the hostname; inspect the actual host field.
  • A URL fragment is handled by the client and is distinct from the query string sent with an ordinary HTTP request.
  • Treat links containing access tokens or private document identifiers as sensitive even when their host looks familiar.

Frequently asked questions

Is a domain name inside a query parameter the destination host?

Not necessarily. The host comes from the URL authority. A domain-looking string in a path or query can be ordinary data or a later redirect target.

Does decoding a link make it safe?

No. Decoding reveals structure or a destination; it does not establish that the site is legitimate or its content is harmless. Review the host and the context in which the link was received.

Why can copied parameters behave differently?

Double encoding, omitted separators, repeated parameter names, and altered plus signs can change interpretation. Compare the exact query string and the receiving application’s parameter rules when diagnosing a mismatch.

What happens to the information I enter?

The utility processes your input in this browser. Some tools retain field values in browser storage or the URL; avoid entering secrets in shareable fields. Page and asset requests still go to the hosting provider. Read the privacy and offline-use notes for details.