PHP Unserialize
runs in your browserno sign-upfree
Convert PHP serialized data into a readable PHP array or JSON, including objects.
Converted to a PHP array
About this tool
This tool decodes PHP serialized data — the a:2:{s:3:"key";…} strings PHP’s serialize() produces and WordPress stores in its database — into a readable PHP array or JSON. It supports strings, numbers, booleans, null, nested arrays and objects (stdClass and custom classes), and counts string lengths in bytes like PHP, so non-English text and emoji decode correctly.
How to use
- Paste the serialized string into the Serialized data box.
- Choose PHP array or JSON output.
- Copy the result or download it.
FAQ
Is it safe to unserialize untrusted data here?
Yes. Unlike PHP’s unserialize(), this tool never creates real objects or runs any code — it only reads the data and shows it.
How are objects shown?
stdClass objects are shown as (object) [...], other classes as \ClassName::__set_state([...]) like var_export. Private and protected property names are cleaned up.
Why do I get a length error?
Serialized strings store their length in bytes. If the data was edited by hand or saved with the wrong encoding, a length no longer matches and the status line shows where.