Base64 vs. Base64URL — Technische Unterschiede & Standards

Warum Standard-Base64 in Web-URLs Probleme verursacht

Standard Base64 (RFC 4648 §4) uses the 64-character alphabet A-Z, a-z, 0-9, +, /, with = used as trailing byte padding.

However, when standard Base64 strings are passed in HTTP query parameters, URI path segments, or web cookies:

• The plus sign + is automatically interpreted by web servers as a space character (%20), corrupting the payload.
• The forward slash / is interpreted by web routers as a path delimiter, altering URL routing logic.
• The equals sign = is used as a key-value parameter separator in query strings.

Alphabet-Zeichenersetzungen (RFC 4648 §5)

Online-Tools ausprobieren

Need to convert between Base64 formats? Use our suite of 100% client-side tools:

• URL-Safe Base64 Konverter
• JWT-Dekodierer Tool
• Base64-String-Dekodierer