Four encodings
Base64, URL-safe Base64, percent-encoding and HTML entities.
Encode and decode Base64, Base64URL, URL and HTML entities.
Loading tool…
Encoded strings turn up everywhere in web work: Basic auth headers, JWT segments, webhook signatures, query strings and escaped HTML in a CMS. Paste the text, choose the format and direction, and get the result instantly, with proper UTF-8 handling for accents and emoji.
Base64, URL-safe Base64, percent-encoding and HTML entities.
Switch direction or swap the result back in to check a round trip.
Accents, non-Latin scripts and emoji are handled correctly.
4 quick steps. Going deeper? Read Building a production REST API with Node.js and Express: validation, auth, errors and testing.
Pick a format: Base64, Base64URL, URL or HTML entities.
Choose Encode or Decode, then paste your text.
Use Swap to feed the result back in and check it round-trips.
Copy the output with one click.
Typical situations where this tool saves time.
Short answers about privacy, limits and how the tool works.
No. Base64 is an encoding that anyone can reverse. Never use it to protect passwords or secrets; use proper encryption or hashing instead.
Base64URL replaces + and / with - and _ and drops the = padding, so the result is safe inside URLs and file names. JWTs use it for their header and payload.
The input contains characters outside the chosen format, or a URL has a broken % sequence. For Base64, make sure you picked the right variant.
I build custom calculators, admin utilities and integrations for WordPress, Laravel and Next.js teams.
Binary-safe text for headers, data URIs and APIs (UTF-8).
eyJ1c2VyIjoiSGVtYW50Iiwicm9sZSI6ImVkaXRvciJ9
Everything runs in your browser. Text is never uploaded.