maratoolOpen CRX File Online
Unpack a Chrome extension and read it: the manifest, every permission in plain English, and the source of every file inside.
Store downloads are routed through our proxy, because the store blocks browsers from fetching them directly. The proxy passes the bytes through and keeps no copy.
Select a filePick a file from the list to read it.
What is Open CRX File?
Open CRX File Online unpacks a Chrome extension so you can read it. A .crx file is a signed ZIP, so this tool strips the signature header, lists every file inside, translates each requested permission into a plain sentence, and shows the source of any file you click. It also checks the signature and derives the extension ID from the embedded public key, which is how you tell an original from a repack.
How to use
- Drop in a .crx, .zip or .xpi file, or paste a Chrome Web Store URL or extension ID.
- Read the permission summary first: it says, in plain English, what the extension can reach.
- Click any file in the tree to read its source, or search across every file at once.
Frequently asked questions
What is a .crx file?
A .crx file is a ZIP archive with a signature header bolted on the front. That header is why double-clicking it does nothing and why an archive tool often refuses it. Strip the header and what remains is an ordinary ZIP holding the manifest.json, scripts, styles and icons.
How do I open a CRX file without installing the extension?
Drop it here. The header is parsed, the ZIP inside is read, and every file is listed for you to read. Nothing is installed and no extension is enabled, which is the point of inspecting one before you trust it.
Can I see the source code of an extension in the Chrome Web Store?
Yes. Paste the store URL or the 32-character extension ID and the packed extension is fetched and unpacked. Most store extensions ship minified JavaScript, so use the re-indent button to make it readable.
Is my file uploaded anywhere?
A file you drop in is parsed in your browser and never leaves your machine. Loading one from the Web Store is different: the store refuses direct browser requests, so that download is routed through our proxy, which passes the bytes through and keeps no copy.
Last updated
Powered by maratool