HTTP Basic Authentication sends credentials as a Base64-encoded "username:password" string in the Authorization header. This tool builds that header for you from a username and password, instantly and locally.
How to use it
- Enter the username.
- Enter the password.
- The complete Authorization header is generated.
- Copy it into your API client or curl command.
About Basic Auth Generator
When testing an API that uses Basic Auth, you need the header in the exact form "Authorization: Basic <base64>". Encoding "user:pass" by hand is easy to get wrong. This tool produces the full header and the raw token, ready to paste into curl, Postman or your code. Remember that Basic Auth is only as secure as the transport — always use HTTPS, because the credentials are merely encoded, not encrypted. Encoding happens in your browser.
FAQ
Is Basic Auth secure?
Only over HTTPS. The credentials are Base64-encoded, not encrypted, so anyone who sees the header can decode them.
What format is the output?
The Authorization header value: the word Basic followed by Base64 of "username:password".
Is HTTP Basic Authentication secure?
Basic Auth only Base64-encodes the credentials — it does not encrypt them — so it must always be used over HTTPS. Because this tool runs entirely in your browser, your username and password are never sent anywhere while generating the header.