How to Encode and Decode Base64 Strings Online
September 4, 2026
Written by Mohammad Sohail
Base64 is a encoding scheme that converts binary data into ASCII text. It is used everywhere on the web — in data URLs, email attachments (MIME), HTTP headers, JWT tokens, and API authentication. Knowing how to encode and decode Base64 is essential for developers, security testers, and anyone working with web APIs.
What Base64 Actually Does: Base64 takes every 3 bytes of binary data and converts them into 4 ASCII characters from the set A-Z, a-z, 0-9, +, and /. The result is about 33% larger than the original data. For example, the word 'Hello' (5 bytes) becomes 'SGVsbG8=' (8 characters). The '=' at the end is padding.
When You Need Base64: Embedding images directly in HTML or CSS using data URLs (data:image/png;base64,...). Decoding JWT tokens to inspect payload claims. Encoding credentials for HTTP Basic Authentication (Authorization: Basic dXNlcjpwYXNz). Sending binary file content in JSON APIs. Debugging email headers.
What I Tested: I used the [Base64 Encoder/Decoder](/developer-tools/base64-encoder) with several inputs.
• Text 'Hello, World!' → Encoded: 'SGVsbG8sIFdvcmxkIQ==' (16 characters). Round-trip decoded back to 'Hello, World!' correctly.
• Text 'https://www.freedigitaltoolkit.com' → Encoded: 'aHR0cHM6Ly93d3cuZnJlZWRpZ2l0YWx0b29sa2l0LmNvbQ==' (56 characters). Decoded correctly.
• Empty string '' → Encoded: '' (empty). No padding added. Correct behavior.
• Decoded invalid Base64 '!!!invalid!!!' → Error message: 'Invalid Base64 input'. The tool does not crash or produce garbage output.
Step-by-Step: (1) Open the [Base64 Encoder/Decoder](/developer-tools/base64-encoder). (2) Paste your text in the input field. (3) Click 'Encode' to convert to Base64, or 'Decode' to convert from Base64. (4) Copy the result.
One Limitation: Base64 is encoding, not encryption. It provides zero security. Anyone can decode a Base64 string instantly. Never use Base64 to hide passwords, API keys, or sensitive data. Use proper encryption (AES, RSA) for that.
Common Mistake: Including line breaks in Base64 strings. Some systems (especially email) insert line breaks at 76 characters. If your decoder fails, remove all line breaks and whitespace before decoding. Our tool handles this automatically — it strips whitespace before processing.
Privacy: All encoding and decoding happens in your browser. Your data is never sent to any server.
Next Step: If you need to URL-encode the Base64 output for use in query parameters, use the [URL Encoder](/developer-tools/url-encoder) to convert special characters to percent-encoded format.