Is Basic Auth secure?

The credentials are only Base64-encoded, not encrypted, so Basic Auth should always be used over HTTPS.

Can I decode an existing header?

Yes, switch to Decode mode and paste the Base64 token or full Authorization header value.

Does this tool send my credentials anywhere?

No, encoding and decoding happen entirely in your browser.

Basic Auth Header Generator

Build or decode an HTTP Basic Authorization header.

Works Offline

Privacy First

No Login

No API

Mode

Credentials

Username

Password

Result

Header

curl snippet

curl -u "admin:secret123" https://api.example.com/resource

fetch snippet

fetch("https://api.example.com/resource", {
  headers: { Authorization: "Basic " }
});

About the Basic Auth Header Generator

Encode a username and password into an HTTP Basic Authorization header, or decode an existing header back into its username and password. Includes ready-to-copy curl and fetch snippets.

Examples

Encode credentials

admin:secret123

Output

Authorization: Basic YWRtaW46c2VjcmV0MTIz

Related tools

Base64 Encoder

Encoders & Crypto

Encode or decode text to/from Base64, UTF-8 safe.

AES Encrypt/Decrypt

Encoders & Crypto

Encrypt or decrypt text with AES-GCM and a passphrase.

Base32 Encoder

Encoders & Crypto

Encode or decode text using RFC 4648 Base32.

Bcrypt Hash Generator

Encoders & Crypto

Generate and verify bcrypt password hashes with adjustable cost.

Checksum Comparator

Encoders & Crypto

Hash text or a file and compare against an expected checksum.

File Hash Calculator

Encoders & Crypto

Compute SHA-1/256/384/512 digests of a local file.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-10 · Runs entirely in your browser