Basic Auth Header Generator
Generate the HTTP Basic Auth header from a username and password.
The header behind the login prompt
HTTP Basic Authentication sends a username and password in an Authorization header, encoded together in Base64. This builds that header from your credentials, which is what you need when testing an API or endpoint that uses Basic Auth and you want to construct the request by hand.
Enter the username and password and the ready-to-use header is generated.
Only as safe as the connection
The crucial thing to understand about Basic Auth is that the credentials are only Base64-encoded, not encrypted — anyone who sees the header can decode the username and password instantly. That means it is only acceptable over HTTPS, where the connection itself is encrypted; over plain HTTP it sends credentials in effectively plain text. It is fine for testing and for internal or simple cases behind HTTPS, but for anything serious, token-based schemes are the modern choice.
Common questions
Is Basic Auth secure?
Only over HTTPS. The credentials are merely Base64-encoded, so over plain HTTP they are effectively sent in the clear.
How are the credentials encoded?
The username and password are joined and Base64-encoded into the Authorization header — encoding, not encryption.
Is anything uploaded?
No. The header is generated in your browser, so your credentials stay on your machine.