What is a Basic Auth decoder?
HTTP Basic Authentication sends username:password encoded with Base64 inside an Authorization: Basic ... header. This tool decodes that credential string so you can inspect test headers and debug integrations.
How to use it
- Paste either the whole
Basic ...header value or only the Base64 credentials. - Review the username and password fields.
- Rotate the credentials if you accidentally paste production secrets into an unsafe place.
Example
Input: Basic dXNlcjpwYXNz
Output: username user, password pass
Common mistakes
- Basic Auth is not secure by itself. It must be sent over HTTPS.
- Base64 is reversible, so do not log Basic Auth headers in production.
- If the decoded value has no colon, it is not a standard Basic Auth credential pair.
Related tools
- Decode raw strings with Base64 to text.
- Validate copied values with the Base64 validator.
- Encode test credentials with Text to Base64.
Privacy and security
Decoding runs locally, but credentials are still sensitive. Clear the input after inspection.