Secrets & Config
Decode base64 values in a Kubernetes Secret manifest locally.
Runs entirely in your browser
Nothing you paste is uploaded. Monaco and Prettier load on demand from this origin.
Secret manifest
base64 values decoded locally
username
admin
password
super-secret
There is no upload endpoint — your files are processed in this browser tab. Open your network tab and check. See how it stays private.
How to kubernetes secret decoder
- Paste the manifest. Paste your Secret YAML with base64 data values.
- Decode. See each key's decoded plaintext value.
- Edit & re-encode. Change values and get the base64 form back.
Kubernetes stores Secret values as base64, which trips people up: the values look scrambled but aren't encrypted. Decoding them locally lets you verify what a Secret contains without exposing it to an online base64 site.
Because these are real credentials, doing it in the browser is essential. Scan manifests for other exposures with the secret scanner, and validate Compose files with the Compose validator.
Frequently asked questions
Why are Kubernetes secrets base64?
Secret values are base64-encoded (not encrypted) in manifests, so they're not human-readable at a glance. This tool decodes them so you can verify what's actually stored.
Is base64 encoding secure?
No — it's encoding, not encryption. Anyone can decode it, which is why keeping this decode step local (rather than pasting into a website) matters.
Is my manifest uploaded?
No. Decoding and encoding run in the browser, so your secret values stay in the tab.