SAML Decryptor

Decrypt SAML Responses that contain EncryptedAssertion, and AuthnRequest / LogoutRequest messages that contain encrypted NameID values, using the SP PEM private key. The page shows both decrypted XML and analysis results together.

Decrypt with a Private Key

Paste or upload a PEM private key to decrypt encrypted Assertion / NameID / Attribute elements.

PEM only. Uploaded files take priority over pasted text. Private keys and passphrases are not written to logs.

Drag and drop a private key file here

or tap to choose a PEM private key file

Up to 256 characters. Decryption is attempted even if blank.

If you found this tool helpful, we’d love for you to share it on social media!


We display ads to support the operation of this site. We understand that it may be inconvenient, but we appreciate your understanding.