Base64 is not encryption

26 September 2026 · 3 min read

Base64 turns bytes into letters so they survive email and URLs. Anyone can reverse it in a second, which makes it a poor place to hide anything.

If you see a credential that is merely Base64-encoded, treat it as plain text and rotate it.