base64 simply has nothing to do with security; it's not meaningful to ask whether it's "that insecure". It isn't used for security purposes; it's used to encode

base64 simply has nothing to do with security; it's not meaningful to ask whether it's "that insecure". It isn't used for security purposes; it's used to encode bytes that may lie outside a certain range into a known range to allow them to be reliably transported over a medium like an HTTP header. The security of your system is the same whether this value is base64-encoded or not, in the same way that the security of a login form would be the same if you changed the colour of the text input to red, or if you wrote "Password" in Portuguese instead of English.