How this tool works
Base64 represents binary data using sixty-four printable characters, so that something which is not text can travel through a channel that only carries text — an email body, a JSON field, a data URL in a stylesheet. It is an encoding, not encryption: the transformation is public, reversible by anyone, and offers no protection whatsoever.
Text is converted to UTF-8 bytes before encoding and back again after decoding, which is what allows accented characters, other scripts and emoji to survive the round trip rather than coming back mangled. Three bytes of input become four characters of output, so anything encoded this way grows by roughly a third.
What it is for, and what it is not
- It is not a security measure: encoding hides nothing. Anyone can decode a base64 string in seconds, and a password or key stored this way is stored in plain sight.
- Output is about a third larger than the input: which matters for data URLs. Inlining a large image as base64 makes the stylesheet or document bigger than the file it replaced.
- The URL-safe variant is a different alphabet: tokens and URL parameters often use dash and underscore where standard base64 uses plus and slash. Those will not decode here without being converted back first.
- Whitespace and line breaks usually survive: many systems wrap long base64 at a fixed width. Pasted line breaks are generally tolerated by the decoder, but a truncated string is not.