Base64 Decode Online Tool
About Base64 Decode Online Tool:
This online base64 decode tool helps you to convert a base64 format String into a raw string.
Paste your Input String or drag text file in the first textbox, then press "Base64 Decode" button, and the result will be displayed in the second textbox.
Is Wordpress Rest API Authentication method (based on base64) really secure?
The WordPress REST API is enabled by default on all WordPress sites. APIs can be accessed by programs outside the site itself (such as mobile apps and RSS clients), the REST API endpoint is
/wp-json/wp/v2/.
WordPress REST API can be authenticated by adding header to the http request. The auth token is based on base64:
auth_token = base64.standard_b64encode(user + ':' + password) headers = {'Authorization': 'Basic ' + auth_token}
But wait a minute, Base64 is not an encryption method, anyone can decode a Base64 string. Does that mean the admin password is transmitted on the open Internet without encryption? so anyone can hack into the WordPress REST API? It's scary just thinking about it.
Luckily (maybe not), most website nowadays support
https, which encrypt all the http request and response. And for those site does not support
https, Base64 authentication method may never been used, it's totally up to the website owner.
Generally speaking, It's a bad practice to use Base64 as the authentication method, so stay away from it as far as possible!!!
Does Base64 Decode Online Tool log my data?
Absolutely NOT, this Base64 Decode Base64:
RFC 3548:
Python Implementation of Base64:
Java Implementation of Base64:
Base64 Decode with Python (with package base64):
import base64 def base64_decoder(str): return base64.b64decode(str.encode())
Base64 Decode with Java (with package MessageDigest):
import java.util.Base64; public String decode(String str) { byte[] decodedBytes = Base64.getDecoder().decode(str.getBytes()); String text = new String(decodedBytes); return text; }