What Is Base64 Encoding? How It Works, When to Use It, and Examples

The Core Problem Base64 Solves

Early internet protocols — email (SMTP), HTML, XML, JSON — were designed for text. Binary data (images, audio, executable files) contains bytes with values from 0 to 255, many of which are not printable characters and can be misinterpreted by text-based systems. Bytes like 0x00 (null), 0x0D (carriage return), and 0x0A (newline) have special meanings in text protocols and cause corruption when embedded directly.

Base64 solves this by encoding every 3 bytes of binary data into exactly 4 printable characters. The output only uses 64 safe characters — A–Z, a–z, 0–9, +, / — that are safe in any ASCII-based system.

How Base64 Encoding Works

Base64 works in groups of 3 bytes (24 bits). It splits those 24 bits into four 6-bit groups, then looks each 6-bit value up in the Base64 alphabet table (where 0 = A, 1 = B, ... 63 = /):

The Base64 Alphabet

Base64 Encoding Examples

Where You Encounter Base64

Base64 Variants

When NOT to Use Base64

• For security: Base64 is reversible in milliseconds. Never use it to protect passwords or sensitive data. Use bcrypt/Argon2 for passwords and AES for sensitive data.
• For large file transfers: Base64 increases file size by ~33%. Transfer large files as binary over HTTP/2 instead.
• For performance-critical images: Large images as data URIs increase HTML size and block rendering. Use separate image files with proper caching instead.

Base64 in Code

# Encode
btoa('Hello World')  // → 'SGVsbG8gV29ybGQ='

# Decode
atob('SGVsbG8gV29ybGQ=')  // → 'Hello World'

# Encode
Buffer.from('Hello').toString('base64')  // → 'SGVsbG8='

# Decode
Buffer.from('SGVsbG8=', 'base64').toString()  // → 'Hello'

# Encode
import base64; base64.b64encode(b'Hello').decode()  # → 'SGVsbG8='

# Decode
base64.b64decode('SGVsbG8=').decode()  # → 'Hello'

# Encode
echo -n 'Hello' | base64  # → SGVsbG8=

# Decode
echo 'SGVsbG8=' | base64 -d  # → Hello