Basic Auth Header Generator
Turn a username and password into an HTTP Basic Authorization header, or read one back.
Runs entirely in your browser.
Build an HTTP Basic Authorization Header
Decode a header
About Basic Auth Header Generator
HTTP Basic authentication joins the username and password with a colon, base64-encodes the pair, and sends it as Authorization: Basic <value>. This builds that header, and reads one back the other way when you have a header and want to know what is in it.
Base64 is encoding, not encryption. Anyone who sees the header can decode it instantly - that is what the decode direction here demonstrates. Basic auth is only safe over HTTPS, where the whole request is encrypted in transit; over plain HTTP it is equivalent to sending the password in the clear.
A colon is legal in a password but not in a username, because the first colon is the separator. If a username containing a colon is what you need, Basic auth cannot express it.
Everything is computed in your browser and nothing is transmitted. Even so, prefer a throwaway or test credential when pasting into any web page.
Other Security Tools
- TOTP Generator and Validator — time-based one-time passwords
- ULID Generator — sortable unique identifiers
- UUID Generator — random and time-based UUIDs
- Token Generator — secure random tokens
- HMAC Generator — sign a message with a key
- Hash Generator — MD5, SHA-1, SHA-256 and more
- Bcrypt Hash Generator — hash and verify passwords
- JWT Decoder — inspect a token
- JWT Signer — create and sign a token
- Password Generator — strong random passwords
- Base32 Encode / Decode — the encoding TOTP secrets use
