GLOSSARY

What is Base32?

Base32 encodes bytes using 32 case-insensitive characters — the format of 2FA secrets. Learn how it differs from Base64.

Base32 is an encoding that represents binary data using 32 characters (A–Z and 2–7). It is what authenticator-app secrets are written in, chosen because it is case-insensitive and avoids easily-confused characters.

Base32 vs Base64

Base64 packs data denser (6 bits per character) but uses mixed case plus + and /, which are error-prone to type and unsafe in some contexts. Base32 uses only uppercase letters and digits 2–7 (5 bits per character), so it is longer but far easier for a human to read aloud or type — ideal for a 2FA secret you might enter by hand.

Where you see it

TOTP secrets, some file-sharing links, and systems that need human-transcribable identifiers use Base32. If you have ever typed a 2FA setup key manually, you typed Base32.

Try it now — free, no signup

Use the TOTP generator in your browser. Then, when you need it at scale with an API key and higher limits, grab the full Eveses API.

FAQ

Why are TOTP secrets Base32, not Base64?›
Base32 is case-insensitive and avoids confusing characters, so it is safe to type manually when you cannot scan the QR.
Is Base32 bigger than Base64?›
Yes — it encodes fewer bits per character (5 vs 6), so the output is longer for the same data.

Related