How to · Cloak Proxy
Capture Android emulator HTTPS traffic.
Cloak Proxy connects an Android emulator or USB device through adb with one click: it forwards the proxy port and sets the device's proxy. Android apps ignore user-installed certificates by default, so Cloak Proxy also writes a network security config into your app's debug build, leaving release builds unchanged.
Step by step.
Install Cloak Proxy and trust its certificate
Download Cloak Proxy (free, no account) and open it. In the orange banner, click Install & Trust… and confirm with your Mac password. The certificate is made on your Mac and is unique to your install.
Start the emulator
Or connect the device by USB with USB debugging on and allow your Mac. Use one device at a time: the buttons run adb without choosing one.
Connect the proxy
Click Devices in the toolbar, choose Android, and click Connect Proxy. It shows Proxy set to 127.0.0.1:9090 on the device. No Wi-Fi settings to change.
What it runs adb reverse tcp:9090 tcp:9090 adb shell settings put global http_proxy 127.0.0.1:9090Let your debug build trust Cloak Proxy
In Let your debug build trust Cloak Proxy, keep Bundle the Cloak Proxy certificate, click Add to Project…, pick your Android project (or a Flutter project) and click Write N Files. The files go into
src/debug, so there's nothing to install on the device.Build and install a debug build
Run the debug build on the emulator as usual.
Decrypt your API's host
Right-click a request from it in the traffic list and choose Enable SSL Proxying for the host, or add
api.example.comin Cloak Proxy › Settings… › SSL Proxying. Make the request again and its headers and body show in the inspector.
Every option, screenshot and error message is in the docs:Android, SSL Proxying.
FAQ
If something doesn't show up.
Something else? Email hello@subcloak.com or book a call.
The device has no internet after a restart
Restarting the emulator or unplugging the cable ends the adb forward but leaves the proxy set. The Doctor reports it and offers Re-run adb reverse; Disconnect Proxy removes the proxy when you're done.
Can I decrypt apps I don't build?
Mostly not on Android 7 and later: apps ignore user certificates unless their own config allows it. The browser and apps that opt in work after you install the certificate with Push Certificate.
Keep the config in src/debug
In src/main it would apply to release builds and let a user-installed CA read your users' traffic.
Try it on your own traffic.
Free for life, macOS 14 Sonoma or later, Apple silicon or Intel; Linux in beta. No account, no sign-up.