One missing s
A plaintext scheme carrying a password, which is the typo that sends credentials in the clear
redis://default:s3cret@redis.example.com:6380/2
Redis Connection URL Parser
Paste a Redis connection URL to see exactly what a client will do with it: which host and port, which database, which credentials, and whether the connection is encrypted.
Paste below, or drop a file anywhere on this panel
Or drop a file anywhere on this panel. Nothing is uploaded: the analysis runs in this tab.
The answer appears here
Paste on the left and press Parse. Nothing leaves this tab.
Formatted
Results
Nothing else to flag.
No formatting problems, and nothing the rules object to. Worth remembering what that covers: this reads the file you pasted, not the account or cluster it will be applied to.
No finding matches that filter.
Examples
Real input you can load into the tool above. Each one shows a different thing going wrong, because that is what the tool is for.
TLS with a database
The path component is a database index, not a path
rediss://cache.example.com:6380/3
Common mistakes
These are the ones that fail silently. The config is accepted, nothing raises an error, and the consequence arrives later.
Typing `redis://` when TLS was intended
The TLS scheme is `rediss://` with two s. The typo is invisible, produces a working connection, and sends the password across the network in the clear.
Instead:Check the scheme has two s wherever a password is present.
Putting a raw password containing @ or / in the URL
Unencoded, the URL parses into something else entirely rather than failing, so the client connects to the wrong host or database with no error.
Instead:Percent-encode the password, or supply it separately where the client allows it.
Reading the path as a path
It is the database index. `redis://host/2` means database 2, and Redis Cluster supports database 0 only, so any other index cannot work against a cluster.
Instead:Leave it off unless you mean a specific database.
Four things in a Redis URL are not what they look like
The scheme is registered with IANA and the shape is stable, but several parts behave differently from the HTTP URLs everyone's intuition comes from.
The path is a database index
redis://host/2 means database 2, not a resource called 2. Redis ships with sixteen databases numbered 0 to 15, and anything higher needs the databases directive raised. Redis Cluster supports database 0 only, so a URL carrying any other index cannot work against a cluster.
rediss with two s is TLS
A single s is the ordinary plaintext scheme. The typo is invisible, produces a working connection, and sends your password across the network in the clear. Nothing in Redis will ever mention it, because from the server's point of view nothing is wrong.
The password can appear with no username
redis://:secret@host is the pre-ACL form and is still what most clients expect for a server using requirepass. With Redis 6 ACLs there is also a username, and the default user is literally called default. A username with no password authenticates nothing.
Credentials in a URL leak by default
A connection string lands in shell history, process listings, container environment inspection, crash dumps and any log that records configuration. A password containing @ or / that was not percent-encoded is worse still: the URL parses into something else entirely rather than failing, so the client silently connects to the wrong host or database.
What this cannot see
It parses the string and never connects, so it cannot tell you whether the host resolves, whether the port is open, whether TLS is actually configured on the server, or whether the credentials are correct. It also cannot know which query parameters your particular client supports, since those are a client convention rather than part of the scheme.
More redis tools
Redis Hash Slot Calculator Which of the 16,384 slots does this key land in? Redis Hash Tag Tester Will these keys survive a multi-key command? Redis RESP Protocol Decoder Read what the server actually sent Redis RESP2 vs RESP3 Reply Decoder What the same reply looks like on each protocol Redis Command to RESP Exactly what your client puts on the socket Redis Glob Pattern Tester Redis globs are not shell globs Redis Memory Unit Converter 1g and 1gb are not the same number Redis TTL Converter -1 and -2 are not durations Redis Stream ID Parser The first half is a millisecond timestamp redis.conf Validator Will Redis start with this file? Redis Production Config Linter The settings that cause incidents redis.conf to CONFIG SET Which of these can you change without a restart? Redis ACL Rule Decoder What does this user actually get? Redis ACL Validator Find the rule that does nothing Redis INFO Analyzer The numbers INFO does not print Redis SLOWLOG Analyzer What blocked everyone else Redis CLUSTER NODES Parser Read the topology, and find the gap Redis Cluster Slot Distribution Who owns how much, and what is missing Redis Keyspace Notification Flags Why your events never arrive Redis Memory Calculator The encoding decides, not the data Redis Key Count to Memory The fixed cost per key Redis Encoding Threshold Calculator One field more, several times the memory Redis Bitmap Memory Calculator Sized by the highest bit, not the set ones Redis HyperLogLog Calculator 12 KB whether you count a thousand or a billion Redis Cluster Sizing Only 60% of each node is usable Redis RDB and AOF Size Calculator The fork needs memory, not disk Redis Replication Bandwidth Calculator How long the backlog actually covers Redis Connection Pool Calculator More connections is not more throughput Redis Pipeline Calculator It removes round trips, not work Redis Cache Hit Rate Calculator 99% to 90% is ten times the backend load Redis Eviction Policy Simulator volatile- with no TTLs is noeviction Redis Cost Estimator Your rates, so nothing goes stale Redis Config File Generator A redis.conf with the reasons in it Redis ACL Generator A user that can do exactly one job Redis Maxmemory Config Generator The limit, and the headroom it needs Redis Persistence Config Generator How much you can afford to lose Redis Lua Script Generator Atomic, and short enough to stay that way Redis TLS Config Generator Encrypted, and the old port actually closed Redis Sentinel Config Generator Failover that can actually be authorised Redis Cluster Config Generator Three primaries, and the bus port open Redis Docker Compose Generator Local Redis that is not on the internet Redis Client Config Generator Timeouts on both sides, and a sane pool Redis MEMORY STATS Analyzer Which number actually matters Redis Bigkeys Output Analyzer Elements are not bytes Redis CLIENT LIST Analyzer Find the connection hurting you Redis LATENCY Report Analyzer An empty report may mean nothing was recorded Redis Keyspace Prefix Analyzer Which key family is growing Redis SET Command Builder A plain SET clears the TTL Redis ZRANGE Query Builder REV reverses the argument order Redis SCAN Iteration Planner COUNT is a hint, not a page size Redis Key Name Validator Legal is not the same as workable Redis Cluster Compatibility Checker Works now, breaks when you shard