> For the complete documentation index, see [llms.txt](https://docs.nected.ai/nected-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.nected.ai/nected-docs/security/external-api-authentication/basic-auth.md).

# Basic Auth

Use this method when the external API requires a username and password in the HTTP authorization header.

### What this method does

Nected encodes `username:password` using Base64 and sends:

```http
Authorization: Basic <base64(username:password)>
```

### When to use

* Legacy APIs only support Basic Authentication
* Internal trusted systems still rely on username/password credentials

### Required fields in Nected

* **Username**
* **Password**

![Basic Auth configuration form](https://4290782554-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FLg716fCfV8IUwXQygkTG%2Fuploads%2FNCBBPhzYF7kNtAkl6AeW%2Fimage.png?alt=media\&token=e0f8f8e4-e3fd-47fc-af60-1be410992ce5)

### Step-by-step setup

1. Start from either location:
   * **Path A**: Navigate to **Security > Authorization** and click **+ New Authentication**.
   * **Path B**: Open the **REST API connector configuration sidebar** and click **Create Authentication** from the Authentication dropdown.
2. Select **Basic Auth**.
3. Enter `Username` and `Password`.
4. Save configuration.
5. Attach/select this authentication in the integration/API request step.
6. Run test requests and confirm provider response.

### Validation checklist

* Username/password are current and active.
* Target endpoint expects Basic Auth for this route.
* Request is sent over HTTPS.

### Security considerations

* Always use HTTPS; Basic Auth is not safe over plain HTTP.
* Keep credentials scoped to least privilege.
* Replace with OAuth/API key where possible for stronger controls.

### Common errors and fixes

* **401 Unauthorized**: username/password mismatch.
* **Credentials accepted locally but not in Nected**: verify escaped/special characters.
* **Frequent failures**: password rotation not updated in Nected config.