Our verdict: Charles is a long-running web debugging proxy that web and mobile developers use to see exactly what an app sends and receives. SSL proxying, bandwidth throttling and breakpoints cover most debugging jobs. It is paid software: the license terms allow a 30-day trial, then a $50 license per user.
About Charles Proxy
Charles is a web proxy that runs on your own computer. Your browser or any other internet application is configured to go through Charles, which records and displays all data sent and received. With SSL proxying turned on for selected hosts, it shows HTTPS requests and responses in plain text. Phones and tablets can use the PC as their proxy, so mobile app traffic can be inspected too.
Charles is developed by XK72 Limited in New Zealand. The end user license agreement grants a 30-day free trial starting on the date of first download; after that you need to buy a license. A user license costs $50 and is valid for all updates of the current major version, Charles 5. No account or card is needed to start the trial.
What it does well
- SSL proxying. Shows HTTPS requests and responses in plain text for the hosts you enable.
- Bandwidth throttling. Simulates slower connections, including added latency.
- Breakpoints. Pauses requests or responses so you can edit them before they continue.
- Repeat and edit requests. Resends captured requests, with changes, to test back-end behavior.
- JSON and XML viewers. Displays API payloads as a tree or as text.
Who it is for
Good fit
Web and mobile developers who need to inspect, throttle or modify the HTTP traffic of browsers, apps and phones.
Look elsewhere
People looking for a free proxy, and security testers who need a vulnerability scanner.
Pros and cons
Pros
- Mature, reliable proxy for HTTP and HTTPS
- Bandwidth throttling built in
- Works with phones and tablets through the PC
- One-time license instead of a subscription
Cons
- Paid after the 30-day trial ($50 per user)
- A license covers only the current major version
- No vulnerability scanning or scripting like security-focused proxies
How to install Charles Proxy
The download page offers MSI and APPX packages for Windows x64 and Arm64; the developer recommends the APPX package. To inspect HTTPS, install the Charles root certificate from the Help menu and enable SSL proxying for each host you need. If Charles crashes, your system proxy settings can stay pointed at it; restarting and quitting Charles normally resets them.
Questions about Charles Proxy
Is Charles Proxy free?
No. The license terms allow a 30-day free trial without an account or card. After that you need a license: $50 per user for Charles 5, with volume discounts and site licenses for organizations.
Can Charles decrypt HTTPS traffic?
Yes. Install the Charles root certificate and enable SSL proxying for the hosts you want to inspect. Apps that use certificate pinning will still refuse the connection.
Can I use Charles with an iPhone or Android phone?
Yes. Set the phone's Wi-Fi proxy to your PC's IP address and the Charles port, usually 8888, then install the Charles certificate on the phone to see HTTPS traffic.
