Issue
Sign In
StepCodex FeaturedStepCodex Reviews
Notion Docs

Encode/decode Base64. Free online tool, no login, no sign-up.

LocalPersonal data security

Loading Tool Engine

Usage Guide & Tech FAQ

Usage Guide

  1. Pick encode vs decode; for URLs confirm whether you need base64url (`-_`, often no padding).
  2. Strip markdown fences, quotes, and accidental newlines—those commonly break decoding.
  3. Try decoding a short prefix first on huge blobs to validate alphabet and padding behavior.
  4. For binary payloads (certs/images), use file upload if the tool supports it instead of pasting corrupt text.
  5. When placing output in HTTP headers/cookies, you may still need URL-encoding or quoting rules.
  6. Agree with peers: standard base64 vs base64url, padding policy, and 76-char wrapping.
  7. Logs may truncate base64 or inject invisible characters—verify with a hex side channel when needed.
  8. Reverse chained transforms (base64 then URL-encode) in the opposite order to avoid half-decoded states.
  9. Copy/paste across encodings (UTF-8 misread as Latin-1) changes intermediate text—be explicit about code pages.
  10. Close the tab and clear the clipboard after handling sensitive payloads.
  11. Read the title and description first to confirm this utility matches your task (avoid using the wrong tool and misinterpreting output).
  12. Paste or type input in the editor; if a sample/template is provided, load it first to learn the expected output shape.

Related Tech Knowledge

  • Base64 maps 3 bytes to 4 printable characters; `=` padding completes the last quantum.
  • Base64url swaps `+/` for `-_` and often drops padding—common in JWT and URL-safe contexts.
  • Decode failures usually mean illegal chars, bad length without padding handling, or truncation.
  • Base64 is not encryption—anyone can recover the original bytes from the string.
  • PEM wraps base64 between BEGIN/END lines; strip headers/footers before decoding the body.
  • Data URLs need the `data:...;base64,` prefix removed; keep MIME metadata separate from the payload.
  • Large inputs decode to ~75% of the original bytes—watch browser memory limits.
  • After decoding bytes, use UTF-8 (or the right charset) to interpret human-readable text.
  • Some runtimes only Latin-1 in `btoa`; Unicode text may need UTF-8 bytes first, then base64.
  • This tool runs locally; file access depends on the page capabilities.
  • Core parsing and computation run in your browser; by default your raw business payload is not persisted to this site’s servers (see on-page privacy notes).
  • The pipeline is typically: read input → parse (lexical/syntactic/structured) → transform → render; failures aim to be diagnosable.