Base64 Encoder & Decoder

The 60-second version

Base64 is a way to represent binary data — images, files, encryption keys, anything — using only 64 printable characters (A–Z, a–z, 0–9, +, /, with = as padding). It's not encryption. Anyone can decode it instantly. It exists so you can safely shove arbitrary bytes into text-only places like emails, URLs, JSON, or HTTP headers.

Where you'll see it

• Email attachments — every PDF you send is Base64 inside the SMTP body.
• JWT tokens — header and payload are Base64URL.
• Data URLs — data:image/png;base64,iVBORw0K… embeds an image directly in HTML.
• Basic Auth — your username:password is Base64 in the Authorization header.
• Configuration files — encoded secrets, certificates, public keys.

Common confusion

"Base64-encoded password" doesn't mean secure. If a system stores passwords as Base64, that's the same as storing them in plaintext — anyone with the encoded string can recover the original.