---
title: "What are the security risks of using Basic Authentication?"  
description: "What are the security risks of using Basic Authentication?"  
author: "ICSM Computer"  
published: 2025-07-27  
updated: 2025-07-28  
canonical: https://www.mindstick.com/forum/161830/what-are-the-security-risks-of-using-basic-authentication  
category: "authentication"  
tags: ["authentication", "authorization"]  
reading_time: 1 minute  

---

# What are the security risks of using Basic Authentication?

**What are the [security risks](https://www.mindstick.com/forum/160411/what-security-risks-are-associated-with-bearer-tokens-and-how-can-they-be-mitigated) of using [Basic](https://www.mindstick.com/interview/34340/what-is-basic-authentication) [Authentication](https://www.mindstick.com/blog/177/authentication-and-authorization-in-asp-dot-net)?**

## Replies

### Reply by Anubhav Sharma

**What are the [security](https://www.mindstick.com/articles/43813/new-security-technologies) [risks](https://www.mindstick.com/blog/301608/what-are-the-world-s-top-5-environmental-risks) of using Basic Authentication?**

1. Credentials are sent with every request (even cached).
2. Base64 is not secure — it’s just encoded, not encrypted.
3. Without HTTPS, credentials can be intercepted (man-in-the-middle attack).
4. No session management or token expiration.


---

Original Source: https://www.mindstick.com/forum/161830/what-are-the-security-risks-of-using-basic-authentication

Copyright © MindStick Software Pvt. Ltd. This Markdown version is provided for developers, AI systems, and offline reading.