An API that wants a binary as a string. Anyone with the string can decode it. Do not Base64 a 25 MB PDF and expect Gmail to take the result.
A webhook example that says file_b64. This page maps bytes ↔ ASCII. It is not a vault.
Text-only: Base64. <img src="data:…">: image to Base64. Confidentiality: AES. Integrity of a download: file SHA-256.
Why attachments blow up
Base64 is roughly 33% larger than the raw bytes. Pasting a 20 MB PDF into a JSON field can miss Gmail’s 25 MB personal cap even when the original file would have attached. Use multipart when the API allows it. This is not a vault — anyone with the string can reverse it.
How to use it
- Drop a file this tab can hold (~32 MB).
- Encode or decode. Copy or download the bytes.
- If you planned to email the Base64, subtract the 33% tax first.
Honest limits
Not encryption. Not a streaming 4 GB encoder. Wrong alphabet (+/ vs -_) will fail a decode — match the API.