Type or paste text to encode it as Base64 instantly, or paste Base64 to decode it back to text. It also handles files and images, decodes JWTs, and outputs URL-safe Base64, data URIs, and PEM or MIME line wrapping. Everything runs in your browser, so nothing you enter is ever uploaded.
Decoded only. The signature has not been verified.
Base64 turns any data, such as text, images or files, into plain text made from 64 safe characters: A–Z, a–z, 0–9, + and /. That lets binary data travel through systems built for text, like email, JSON, HTML, CSS and URLs. It's used for email attachments, data URIs that embed images in web pages, API payloads, and the header and payload of JSON Web Tokens (JWTs).
No. Base64 is an encoding, not encryption. Anyone can decode it, so it doesn't hide anything. Never rely on it to protect passwords, keys or other secrets.
Base64 writes every 3 bytes of input as 4 characters, so the output is about a third larger than the original. When the input isn't a multiple of 3 bytes, one or two = signs pad the end.
Standard Base64 uses + and /, which have special meanings in URLs and file names. URL-safe Base64, also called Base64url, uses - and _ instead and usually drops the = padding. JWTs use it. This tool decodes both kinds automatically.
Encoding and decoding happen entirely on your device. Nothing you type, paste or open, including files, is sent to a server, logged or stored. Close the tab and it's gone. The tool even keeps working offline once the page has loaded.
We use Google Analytics to count visits and page views so we can see how the site is used. It never sees the contents of either box. Google may set cookies for this, and you can block them in your browser without affecting the tool.
Found a vulnerability? Email security@base64.tools.