Skip to content
Toolspire

Developer Tools

Basic Auth Generator

Basic Auth Generator is part of Toolspire and is ready as soon as this page loads. The header is Basic, a space, then base64 of user, a colon, and the password. A colon inside the user name is rejected because it would split the pair.

Runs in this tabFreeNo account

On this page

What you can do here

The RFC example is the check

If the sample header differs, the colon or the space was lost.

User and password stay separate

You do not type the colon yourself.

Not a login

The page builds a header. It does not send it.

The sequence

How to use the Basic Auth Generator

  1. 1

    Leave the sample and read the header

    It should match the RFC string.

  2. 2

    Replace both fields for your own pair

    Do this on a machine you trust. The value is only base64.

  3. 3

    Send it only over HTTPS

    Anyone who sees the header can decode the password.

Worth knowing

  • Basic Auth Generator on Toolspire: Aladdin and open sesame produce Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==.
  • That base64 decodes to Aladdin:open sesame, which is the example in RFC 7617.
  • A colon in the user is rejected. The colon is the separator.
  • Characters outside Latin-1 are rejected, because btoa cannot encode them.

Base64 is not a secret

HTTP Basic credentials are the user, a colon and the password, then base64. Aladdin:open sesame encodes to QWxhZGRpbjpvcGVuIHNlc2FtZQ==. Anyone can decode that string. The header is useful as a standard, and it hides nothing from a person looking at the request. Use it on HTTPS, and do not treat the result as encrypted.

FAQ

Questions about Basic Auth Generator

Where does Basic Auth Generator run?

Basic Auth Generator runs in this tab on Toolspire. What you type or drop in is not sent to us and is not stored on a server.

What header does Aladdin / open sesame produce?

Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==

Why reject a colon in the user name?

The colon already separates the user from the password. A second one is ambiguous.

Is the password encrypted?

No. Base64 is reversible by anyone.

Will this log me in?

No. It only writes the header value.

Keep going

Related tools

Base64 Encoder & DecoderNewBase64 Encoder & Decoder on Toolspire: Encode text or files to Base64 and decode Base64 back — UTF-8, URL-safe Base64URL, data URLs for images.Developer ToolsHash GeneratorNewGenerate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE3, CRC32 and HMAC hashes of text or files, and verify checksums. Free, fast and private — without uploading.Developer ToolsChmod CalculatorNewTurn a three-digit chmod mode into rwx letters. 755 is rwxr-xr-x. Each digit is owner, group, then everyone else. Open Chmod Calculator on Toolspire.Developer ToolsJSON Formatter & ValidatorNewJSON Formatter & Validator on Toolspire: Format, validate, minify and repair JSON online. Get the exact line and column of every error.Developer ToolsXML to JSON ConverterNewXML to JSON Converter on Toolspire. Convert XML to JSON and JSON to XML online. Keeps attributes, arrays and leading zeros intact.Developer ToolsDNS LookupNewCheck A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records of any domain, see SPF and DMARC, and do reverse DNS for an IP address. Open DNS Lookup on Toolspire.Developer Tools

Open the full directory

Last updated Report a problem or suggest a feature