Decode a Basic Auth Header
Decode an HTTP Authorization: Basic ... header to recover the username and password it contains, handy for debugging an API integration. 100% local processing — your credentials never leave your machine.
Paste the full header value, including the "Basic " prefix.
How It Works
HTTP Basic authentication encodes the username and password, separated by a ':', in Base64, then prefixes them with "Basic" in the Authorization header of an HTTP request. This is not encryption: anyone intercepting this header can decode it instantly, which is exactly what this tool does, useful for inspecting a captured request during development or testing.
Is Basic Auth secure?
No, Base64 is a simple reversible encoding, not encryption. Basic authentication should never be used without HTTPS, because an intercepted plaintext header immediately reveals the password.
Why does decoding fail?
Make sure the header starts with "Basic" followed by a space, and that the Base64 part after it is complete and valid. A truncated or partially copied header cannot be decoded correctly.
100% local processing: decoding happens entirely in your browser via WebAssembly; the header is never sent to a server.