How is a Basic auth header built?

The "username:password" string is Base64-encoded and used as Authorization: Basic .

What is a Bearer token?

It's a way of passing an access token issued by OAuth2, JWT, etc. directly as Authorization: Bearer .

Is the credential information I enter sent to a server?

No. All processing, including Base64 encoding, happens entirely in your browser.

Is Basic auth secure?

Base64 can be decoded by anyone. Only use it over HTTPS, where the header travels inside the encrypted channel.

Where do I get a Bearer token?

Paste the access token, JWT or API key your API provider issued.

🔑 HTTP Authentication Header Generator

Instantly generate a Basic or Bearer Authorization header value.

Basic (username/password) Bearer (token)

Username

Password

The result will appear here

How to use

Choose Basic or Bearer.
Enter a username/password or a token.
Copy the generated Authorization header value.

🎯 Use Cases

Quickly generate an auth header for Postman or curl testing
Prepare example header values for API documentation
Check the URL and header value for a Basic-auth-protected server

Example

Input

Mode: Basic
Username: admin
Password: s3cr3t

Output

Authorization: Basic YWRtaW46czNjcjN0

In Basic mode the "username:password" string (admin:s3cr3t) is Base64-encoded. The result, YWRtaW46czNjcjN0, is used directly as the Authorization header value.

Authentication schemes compared

The Authorization header carries a scheme plus credentials.

Scheme	Header format	Use
Basic	`Authorization: Basic <base64(user:pass)>`	Username/password auth (RFC 7617)
Bearer	`Authorization: Bearer <token>`	Token-based auth — OAuth2, JWT
Caution	Basic Base64 is encoding, not encryption	Always pair with HTTPS to avoid plaintext exposure

FAQ

How is a Basic auth header built?: The "username:password" string is Base64-encoded and used as Authorization: Basic <value>.
What is a Bearer token?: It's a way of passing an access token issued by OAuth2, JWT, etc. directly as Authorization: Bearer <token>.
Is the credential information I enter sent to a server?: No. All processing, including Base64 encoding, happens entirely in your browser.
Is Basic auth secure?: Base64 can be decoded by anyone. Only use it over HTTPS, where the header travels inside the encrypted channel.
Where do I get a Bearer token?: Paste the access token, JWT or API key your API provider issued.