EN
ENARDEESFAFRHEHIIDITJAKONLPLPT-BRRORUTHTLTRUKVIZH

General dev

Basic Auth Header Generator / Decoder

Runs locally

Use Basic Auth Header Generator / Decoder

What it does

Create an HTTP Basic Authorization header from a username and password, or decode a Basic value back to username:password. The value is only Base64, so anyone who sees the header can read the password.

It runs entirely in your browser: nothing you enter is uploaded.

Example

RFC 7617 example

Input
Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
Output (captured 2026-10-20)
Aladdin:open sesame

Decode shows Aladdin:open sesame, the sample credentials from RFC 7617.

FAQ

Is Basic authentication secure?

Only over HTTPS. The credentials are Base64-encoded, not encrypted, so anyone who captures the header or finds it in a log, a script or a phishing kit's configuration can read the username and password.

What input does Decode accept?

The Base64 value with or without the Basic prefix, as in Basic dXNlcjpwYXNz. Leave out the Authorization: header name, because the full header line shows Error; non-ASCII credentials are read as UTF-8.

Are the credentials sent anywhere?

No. Encoding and decoding run in your browser; nothing is uploaded, and no request is made with the header.

  • HTTP Request Builder

    Build a request from method, URL, headers and body, then copy it as a curl command or fetch() snippet.

  • Cookie & Set-Cookie Parser

    Split Cookie and Set-Cookie strings into a table of names, values and attributes like Secure, HttpOnly and SameSite.

  • CORS Headers Generator

    Build Access-Control-Allow-Origin, Methods, Headers, Max-Age and Credentials response headers.

  • JWT Decoder

    Decode a JWT's header and payload and show its algorithm and exp time; the signature is not verified.

  • llms.txt Generator

    Generate an llms.txt Markdown file (llmstxt.org proposal) from your site name, summary and key page links.

Browse all 161 tools