Skip to main content
Fiddler Not Working with Chrome? Fix HTTPS Decryption & Proxy Issues
Troubleshooting7 min read

Fiddler Not Working with Chrome? Fix HTTPS Decryption & Proxy Issues

Fix Fiddler not working with Chrome: resolve HTTPS decryption failures, localhost bypass, certificate trust, and proxy misconfigurations for reliable HTTP debugging.

Share:

Chrome’s aggressive security defaults and evolving proxy handling make Fiddler debugging unreliable without proper configuration — especially for modern web apps relying on HTTPS, service workers, or localhost APIs. If you're seeing blank captures, missing requests, or failed HTTPS decryption in Chrome while Fiddler works fine in Edge or Firefox, the root cause is almost always misaligned proxy settings, certificate trust, or Chrome-specific flags. This isn’t a Fiddler bug — it’s a configuration gap. Let’s fix it step-by-step.

Why Chrome Breaks Fiddler (and Why It Matters)

Unlike legacy browsers, Chrome inherits its proxy settings from the OS only when launched without explicit flags — and even then, it may bypass the system proxy for localhost, 127.0.0.1, or domains with HSTS preloading. Worse, Chrome 89+ enforces stricter certificate validation, rejecting Fiddler’s root certificate unless explicitly trusted in the OS certificate store and added to Chrome’s own certificate manager. Without proper https decryption, you’ll see red warnings, failed TLS handshakes, or empty Secure tab entries in Fiddler — crippling your fiddler debugging workflow.

This directly impacts API testing, frontend-backend integration, and security validation. If your team relies on fiddler proxy for real-time request inspection or automated test replay, broken Chrome support stalls velocity. Fortunately, every issue is fixable — and most require under two minutes.

Step 1: Verify Fiddler Is Running as System Proxy

Fiddler must be the active system proxy for Chrome to route traffic through it. Chrome doesn’t read Fiddler’s internal proxy port unless the OS-level proxy is set correctly.

✅ Check Fiddler’s Proxy Configuration

  1. Launch Fiddler → Tools > Options > Connections
  2. Confirm "Allow remote computers to connect" is unchecked (unless you’re debugging mobile devices)
  3. Note the port number (default: 8888)
  4. Ensure "Act as system proxy on startup" is checked

💡 Pro tip: If you’ve previously disabled this option, restart Fiddler after re-enabling it. Fiddler won’t auto-apply proxy changes mid-session.

✅ Validate Windows/macOS Proxy Settings

  • Windows: Press Win + Rinetcpl.cplConnections tabLAN settings → Confirm "Use a proxy server" is checked and address is 127.0.0.1:8888
  • macOS: System Settings > Network > Advanced > Proxies → Enable Web Proxy (HTTP) and Secure Web Proxy (HTTPS) → Set both to 127.0.0.1 port 8888

If these are misconfigured, Chrome ignores Fiddler entirely — even if Fiddler shows traffic from other apps. Use more tutorials to learn how Fiddler’s proxy architecture differs from tools like Charles or mitmproxy.

Step 2: Install and Trust Fiddler’s Root Certificate Correctly

HTTPS decryption fails silently in Chrome if its root certificate isn’t installed and trusted in the correct certificate store. Chrome no longer uses the Windows Certificate Manager alone — it validates against both the OS store and its own isolated certificate database.

✅ Reinstall FiddlerRoot Certificate

  1. In Fiddler → Tools > Options > HTTPS
  2. Uncheck "Decrypt HTTPS traffic", click OK, then re-check it
  3. Click "Actions > Trust Root Certificate" → Follow prompts to install into Trusted Root Certification Authorities (Windows) or System keychain (macOS)

⚠️ Critical: On Windows, do not install into "Current User" — Chrome reads certificates only from the Local Machine store. Use certlm.msc to verify FiddlerRoot appears under Trusted Root Certification Authorities > Certificates.

✅ Force Chrome to Recognize the Certificate

Even with correct installation, Chrome caches certificate trust. Clear it:

  1. In Chrome, go to chrome://settings/certificates
  2. Go to Authorities tab → Find DO_NOT_TRUST_FiddlerRoot (or similar)
  3. Select it → Click Remove
  4. Restart Chrome completely (close all windows, check Task Manager for lingering chrome.exe processes)
  5. Visit https://example.com → Click 🔒 → Connection is secure > Certificate is valid → Verify issuer is FiddlerRoot

If you still see ERR_SSL_UNRECOGNIZED_NAME_ALERT or NET::ERR_CERT_AUTHORITY_INVALID, Fiddler’s certificate isn’t trusted end-to-end. This is the #1 cause of failed https decryption in Chrome.

Step 3: Bypass Chrome’s localhost & HSTS Bypasses

Chrome automatically skips proxying for localhost, 127.0.0.1, and domains on its HSTS preload list — even if the system proxy is set. That’s why your local dev server (http://localhost:3000) never appears in Fiddler.

✅ Use `--proxy-bypass-list="<-loopback>` Flag

Launch Chrome with explicit proxy bypass control:

  • Windows: Right-click Chrome shortcut → Properties → Append to Target field:
    --proxy-server="127.0.0.1:8888" --proxy-bypass-list="<-loopback>"
    
  • macOS/Linux: From Terminal:
    open -a "Google Chrome" --args --proxy-server="127.0.0.1:8888" --proxy-bypass-list="<-loopback>"
    

The <-loopback> flag tells Chrome not to bypass localhost — forcing all traffic through Fiddler. This is essential for fiddler debugging React/Vue dev servers, .NET Core backends, or any local API.

✅ Disable HSTS for Local Domains (Optional)

If testing https://localhost (e.g., with mkcert), Chrome may enforce HSTS and block Fiddler injection. Clear HSTS state:

  1. Go to chrome://net-internals/#hsts
  2. Under Delete domain security policies, enter localhost → Click Delete
  3. Also delete 127.0.0.1 if used

Note: This only affects Chrome — it won’t impact production HSTS behavior.

Step 4: Disable Conflicting Extensions & Flags

Chrome extensions like ad blockers, privacy tools (uBlock Origin, Privacy Badger), or corporate security agents (Zscaler, Netskope) often intercept TLS traffic before Fiddler can — causing duplicate decryption attempts or outright connection failures.

✅ Test in Chrome Incognito Mode (No Extensions)

  1. Press Ctrl+Shift+N (Windows) or Cmd+Shift+N (macOS)
  2. In the incognito window, visit https://example.com
  3. Check Fiddler: Do requests appear? Is HTTPS decrypted?

If yes → an extension is interfering. Disable extensions one-by-one (go to chrome://extensions) until Fiddler works.

✅ Check for Conflicting Startup Flags

Some enterprise environments inject proxy flags via Group Policy or launch scripts. To rule this out:

  1. Open Task Manager → Details tab
  2. Right-click chrome.exePropertiesDetails → Check Command line
  3. Look for duplicate --proxy-server, --ssl-version-min, or --unsafely-treat-insecure-origin-as-secure flags

Conflicting flags override Fiddler’s proxy settings silently. Remove them from shortcuts or login scripts.

Step 5: Update Fiddler & Chrome, Then Reset Fiddler Config

Outdated versions cause subtle handshake mismatches — especially with TLS 1.3 and ALPN negotiation. Chrome 115+ tightened certificate pinning; Fiddler v5.0.20234.1+ includes fixes for QUIC and HTTP/3 fallback handling.

✅ Update & Reset

  1. Download latest Fiddler Classic from telerik.com/fiddler
  2. In Fiddler → Help > Check for Updates
  3. Reset all settings: Tools > Options > General > Reset All Settings
  4. Restart Fiddler and Chrome

🔁 Bonus reset: Delete Fiddler’s config folder to clear corrupted rules:

  • Windows: %USERPROFILE%\Documents\Fiddler2
  • macOS: ~/Documents/Fiddler2

This ensures no stale AutoResponder rules, custom breakpoints, or malformed CustomRules.js interfere with Chrome capture.

Step 6: Advanced Debugging — When Nothing Else Works

Still no traffic? Diagnose at the network layer.

✅ Verify Port Binding & Firewall

Run this in PowerShell (Admin):

netstat -ano | findstr :8888

If nothing returns, Fiddler isn’t binding — likely blocked by antivirus or another app using port 8888. Change Fiddler’s port (Tools > Options > Connections) to 8889, update OS proxy, and retry.

✅ Capture Loopback Traffic Explicitly (Windows Only)

By default, Windows restricts loopback proxying. Enable it:

CheckNetIsolation LoopbackExempt -a -n="Microsoft.MicrosoftEdge"  # Edge example
# For Chrome, use its package family name — but easier: run as Admin

Or launch Fiddler as Administrator — this grants required loopback privileges.

✅ Use Fiddler’s Built-in Diagnostics

Fiddler logs detailed connection errors:

  • Help > Troubleshoot Problems opens diagnostics wizard
  • File > Export Sessions > All Sessions → inspect raw headers for 407 Proxy Authentication Required or 502 Bad Gateway
  • Check Log tab for Failed to decrypt HTTPS or Unable to establish tunnel

These clues point to certificate, cipher suite, or TLS version mismatches — common in corporate environments with TLS inspection appliances.

Conclusion: Key Takeaways for Reliable Fiddler Debugging

Fiddler not working with Chrome is rarely a tool failure — it’s a configuration alignment problem. You now know how to:

  • ✅ Enforce system proxy binding so Chrome respects Fiddler’s fiddler proxy
  • ✅ Install and trust FiddlerRoot in the right store, enabling full https decryption
  • ✅ Override Chrome’s localhost bypass with --proxy-bypass-list="<-loopback>
  • ✅ Isolate extension and flag conflicts using incognito mode
  • ✅ Reset configurations and verify low-level network binding

Mastering these steps transforms Fiddler from a sporadic helper into a predictable, production-grade http debugging companion. Once configured, you’ll capture every XHR, fetch, WebSocket upgrade, and service worker registration — with full request/response visibility and editable breakpoints.

For deeper protocol analysis, explore Fiddler’s Inspectors tab, AutoResponder, or Composer — all covered in our browse Troubleshooting tutorials. And if your environment involves corporate proxies or zero-trust networks, contact us for tailored guidance on hybrid decryption setups.

Share:

Related Topics

fiddler tutorialfiddler debugginghttp debuggingfiddler proxyhttps decryption

Get Fiddler Tips & Tutorials

Stay updated with the latest Fiddler tutorials, HTTP debugging guides, request modification tips, and web traffic analysis techniques.

Free forever. New tutorials published daily.

Related Articles