Basic Auth Header
Build Authorization headers and curl commands.
About the Basic Auth Header
Build an HTTP Basic Authorization header from a username and password, with a ready-made curl command and a credentials-in-URL variant for quick browser tests. The Base64 token is computed locally, and the tool warns plainly that Basic auth must ride on HTTPS to be safe.
How to use the Basic Auth Header
- Enter the username and password.
- Optionally set the target URL used in the generated command.
- Copy the Authorization: Basic header into your HTTP client.
- Or copy the curl command, which already includes the header and URL.
Basic Auth Header FAQ
How is the header constructed?
The username and password are joined with a colon and Base64-encoded โ Authorization: Basic followed by that token, which is the entire RFC 7617 scheme.
Is Basic authentication secure?
Only over HTTPS: the encoding is not encryption, so credentials cross the network in clear text without TLS. The tool's warning recommends token auth for production APIs.
When is the URL-with-credentials form useful?
For quick manual tests in a browser or tool that accepts https://user:pass@host syntax โ it is convenient for one-offs but leaks credentials into history and logs, as the label warns.