Authorization Header Explained
What the HTTP Authorization header does and when it's used.
Published October 14, 2026
The Authorization header carries credentials for authenticating the request, such as a Bearer token or Basic auth.
Key points
- The most common modern format is "Authorization: Bearer <token>"
- Never log this header's value — it typically contains a live credential