HTTP Basic Auth Generator & Decoder
Build or decode an HTTP Basic Authorization header locally. Supports UTF-8 credentials and passwords containing colons.
How to use
Generation joins username and password with a colon, encodes them as UTF-8, and adds the Authorization: Basic prefix. In decode mode, paste a full header, Basic token or bare Base64 value in the first field.
The first colon separates the username from the password. A username cannot contain a colon; a password can. Control characters are rejected. UTF-8 requires compatible server charset handling; older Latin-1 credentials may not decode here.
Behavior and limits
Base64 is reversible encoding, not encryption. Send Basic credentials only over HTTPS and avoid sharing generated headers. No authentication request is sent and credentials are not saved in local storage.
Reference
Questions & answers
Does decoding prove the password works?
No. It only decodes the header structure. It never contacts the server or verifies an account.
Is my input uploaded?
No. Processing runs in your browser. This tool does not send your input to an API or save it in local storage. Text tools accept up to 200,000 characters.