Basic Auth Generator
Quickly create the base64-encoded string needed for HTTP Basic Authentication from a username and password.
Basic Auth Generator
Authorization header
How to generate a Basic Authentication header
Build the base64-encoded Authorization header value for HTTP Basic Authentication from a username and password.
What Basic Auth is
HTTP Basic Authentication (RFC 7617) sends credentials as "username:password", base64-encoded, inside an Authorization header — Authorization: Basic <encoded value>. Base64 is an encoding, not encryption, so this scheme is only safe to use over HTTPS.
How to use it
- Enter the username and password.
- Copy the generated "Basic ..." header value.
- Send it as the Authorization header on your request (in curl: -H "Authorization: Basic ...").
Security considerations
Because base64 is trivially reversible, never send this header over plain HTTP, and avoid Basic Auth entirely for anything sensitive if the API offers a token-based alternative.
Privacy
Runs locally in your browser. No data is sent to the server.
FAQ
Is Basic Auth secure?
Only when used over HTTPS. The credentials are merely base64-encoded, not encrypted, so anyone who can read the raw request over plain HTTP can recover them instantly.
Does this work with accented letters or emoji in the password?
Yes. The username and password are UTF-8 encoded before being base64-encoded, so any Unicode character is handled correctly.
Where does this header go?
In the Authorization request header, exactly as generated, e.g. Authorization: Basic dXNlcjpwYXNz.