vulnbeacon_TOOLS
← All tools

Developer utilities

Base64 encoder & decoder

Inspect an encoded string locally. Base64 is an encoding, not encryption, and decoded content is displayed as text rather than executed.

How to use Base64 encoder and decoderSteps, privacy & next steps

Convert between Unicode text and standard Base64 without executing the result.

Run this check

  1. Choose Encode or Decode.
  2. Enter Unicode text, or canonical padded Base64 containing UTF-8 text.
  3. Review the text output before copying or exporting it.

What you need

  • Unicode text for encoding, or standard Base64 with correct padding and no whitespace for decoding.

Your input & privacy

Conversion stays in your browser. A copied or exported result can reveal the same sensitive content as the input.

Read the result

Inspect the converted text safely. Clear the input and output when finished; do not share a reversible encoding as if it concealed private data.

Keep in mind

  • Base64 is reversible encoding, not encryption. The text decoder does not support arbitrary binary files.
  • Use the JWT debugger for JWT Base64URL segments.

Your inputs, explained.

JWTs, source snippets, passwords, CSP text, files, hashes and Base64 are processed in browser memory. This toolkit does not upload or save those inputs.

Website checks send the approved URL to this service and contact the target. DNS checks disclose the domain to Cloudflare DNS over HTTPS. Email-breach checks send the full address to Have I Been Pwned when configured and explicitly requested.

Server checks are transient and rate limited. This application does not write tool input or result logs; your hosting provider and contacted services may retain network metadata under their own policies. Exports are saved only when you choose to download them.

Use tools only for assets you own or have permission to assess. Private scans and their saved reports use the separate authenticated VulnBeacon application.