Basic Authentication

Definition

The simplest form of HTTP authentication where the client sends the raw username and password combined into a single Base64 encoded string within the HTTP Header.

Explain Like I'm New

You take `username:password`, mash them together, scramble the text slightly (Base64), and send it to the server on every single request. The server unscrambles it and checks the database.

Real World Example

Often used for internal company tools, simple admin dashboards, or older legacy APIs where complex token systems are overkill.

Common Use Cases

•Simple APIs
•Legacy systems
•Quick prototyping

Interactive Example

Console output will appear here...

Interview Questions

basic

Does Base64 encoding encrypt the password so hackers can't read it??

intermediate

Because Basic Auth sends the actual password on every single request, what protocol is absolutely mandatory to prevent immediate hacking?

Flash Cards

Question

Does Base64 encrypt?

Click to reveal answer

Answer

NO! Base64 is NOT encryption, it is just encoding (like translating English to French). Anyone who intercepts the network request can instantly decode it and read the plaintext password.

Question

What is mandatory?

Click to reveal answer

Answer

HTTPS (SSL/TLS). Because the password is sent in plaintext on every request, HTTPS is required to encrypt the entire network tunnel, keeping the password safe from network sniffers.