Basic Auth Decode
Paste one or more Authorization: Basic headers (or just the Base64 part) and the decoder extracts the username and password from each. Everything runs locally, so credentials never leave your browser.
| # | Username | Password |
|---|
Generate a Basic Auth header
How to use the Basic Auth Decode tool
- Paste headers or Base64 tokens, one per line (or separated by commas, semicolons, tabs, pipes, or as a JSON array).
- Click Decode Basic Auth.
- Review the username and password table.
What is Basic Authentication?
HTTP Basic authentication (RFC 7617) sends credentials as Authorization: Basic base64(username:password). Base64 is only an encoding, so anyone who can see the header can read the password.
Why you should avoid Basic Auth without HTTPS
Credentials are sent with every request and are trivially decoded. Always use HTTPS, and prefer token-based schemes such as OAuth 2.0 bearer tokens, API keys with scopes, or session cookies for user-facing apps.
Frequently asked questions
How do I decode a Basic auth header?
Remove "Basic " and Base64-decode the rest; the result is "username:password". This tool does it automatically for many headers at once.
Comments (0)
Questions, ideas or a bug in “Basic Auth Decode”? Leave a comment, rate the tool, or reply to others.
No comments yet. Be the first to share your feedback!