⚡ 5 Base32 Variant Decoders & Live 2FA Inspector

Base32 Decoder Online

Decode Base32 strings (RFC 4648 Standard, Base32Hex, Crockford Base32 with alias mapping, z-base-32, Geohash) back to plain text, hex, binary, or live 2FA passcodes with 100% browser privacy.

How to Use the Base32 Decoder

1

Paste Base32 Input

Paste any Base32 string (padded, unpadded, formatted with spaces, or 2FA secret key).

2

Select Variant

Choose RFC 4648 Standard (A-Z, 2-7), Base32Hex, Crockford Base32, z-base-32, or Geohash.

3

Set Output Mode

Select Plain Text (UTF-8), Hexadecimal Bytes (0x), or Binary Bits (0s and 1s).

4

Inspect & Copy

Review decoded output, test live 2FA TOTP passcodes, and copy or download the result.

Understanding Base32 Decoding, Permissive Parsing, & Authentication Diagnostics

Base32 decoding is the process of reversing 5-bit ASCII character symbols back into raw binary bytes. Because Base32 is frequently used for human-entered license keys and two-factor authentication (2FA) secrets, robust decoders must support permissive padding recovery, character alias normalization, and instant cryptographic validation.

Permissive Decoding vs Strict RFC 4648 Validation

RFC 4648 mandates that valid Base32 strings end with trailing = padding characters to ensure the total string length is a multiple of 8 characters. However, real-world 2FA authenticator applications (such as Google Authenticator and Authy) strip padding characters to keep secret strings compact.

  • Permissive Mode (Default): Automatically calculates missing bit padding and strips spaces or hyphens without throwing errors.
  • Strict Mode: Enforces strict length alignment and exact padding compliance for protocol validation.

Crockford Base32 Alias Normalization Rules

Crockford’s Base32 is specifically designed for human entry. When decoding, it applies automatic character alias translation:'I' and 'L' (or 'i'/'l') → '1'
'O' (or 'o') → '0'

100% Privacy & Security Guarantee

Base32 strings often contain sensitive 2FA secret keys and cryptographic hashes. Our decoder operates 100% locally in your web browser using JavaScript Web Workers. Zero secret keys or data are uploaded to any server.

Frequently Asked Questions

What is Base32 decoding?

Base32 decoding converts 32-character ASCII strings back into their original binary or UTF-8 text representation by parsing each character into 5-bit chunks.

How does permissive Base32 decoding work?

Permissive decoding automatically strips trailing "=" padding characters, spaces, hyphens, and line breaks before decoding, allowing unpadded 2FA keys to decode smoothly.

How does Crockford’s Base32 decoding normalize characters?

Crockford’s Base32 automatically normalizes visually ambiguous characters: "I" and "L" map to "1", and "O" maps to "0", making it highly tolerant of human entry errors.

Can I view the decoded output in Hexadecimal or Binary format?

Yes! Use the Output Mode dropdown to view decoded data as Plain Text (UTF-8), Hexadecimal Bytes (0x), or Binary Bits (0s and 1s).

What is the Live 2FA / TOTP Passcode Inspector?

When you decode a Base32 2FA secret key (such as a Google Authenticator secret), our inspector computes the live 6-digit TOTP passcode in real-time with a 30-second countdown ring.

What happens if my Base32 string contains invalid characters?

Our tool highlights the exact position index and character token of the illegal character so you can inspect and fix transcription errors.

Is my Base32 input uploaded to any server?

No. 100% of decoding, byte processing, and TOTP passcode computation runs locally inside your web browser. Zero secret keys or data leave your machine.

What Base32 variants are supported for decoding?

We support 5 variants: RFC 4648 Standard (A-Z, 2-7), RFC 4648 Base32Hex (0-9, A-V), Crockford’s Base32, z-base-32, and Geohash Base32.

Why do some Base32 strings lack trailing "=" characters?

Many 2FA implementations omit padding characters to keep secret strings compact. Our decoder handles both padded and unpadded Base32 seamlessly.

Can I download the decoded payload as a file?

Yes. Click the "Download" button to save the decoded string as a file on your computer.

Related Encoding & Decoding Tools