Why is Base64 not encryption?
A practical explanation of encoding, hashing, and encryption.
Base64 is not encryption because it uses no secret key and anyone can reverse it directly. Its purpose is not to hide data, but to represent binary bytes safely in text-based systems.
What changed in this update?
Misleading security language was removed and encoding, hashing, and encryption were separated.
What problem does encoding solve?
Encoding represents data in the character set expected by another system. Base64 is used for binary data in email bodies, data URIs, and text protocols.
What problem does encryption solve?
Encryption aims to make data unreadable without a key. Security also depends on algorithm choice, key management, nonces or IVs, and authentication.
What problem does hashing solve?
A cryptographic hash creates a one-way digest. It supports file integrity, signature workflows, and suitable password hashing systems; it is not designed to recover the original value.
Frequently asked questions
Is Base64URL inside a JWT secure?
JWT sections are readable; security depends on correct signature verification or an encrypted JWT.
Can Base64 store passwords?
No. Passwords require a password hashing algorithm with a salt and an appropriate cost parameter.