diff --git a/cmd/stbak/cmd/archive.go b/cmd/stbak/cmd/archive.go
index 1246215..835222f 100644
--- a/cmd/stbak/cmd/archive.go
+++ b/cmd/stbak/cmd/archive.go
@@ -5,7 +5,7 @@ import (
 	"bytes"
 	"compress/gzip"
 	"context"
-	"encoding/base32"
+	"encoding/base64"
 	"encoding/json"
 	"errors"
 	"fmt"
@@ -525,7 +525,7 @@ func encryptString(
 			return "", err
 		}
 
-		return base32.StdEncoding.EncodeToString(out.Bytes()), nil
+		return base64.StdEncoding.EncodeToString(out.Bytes()), nil
 	case encryptionFormatNoneKey:
 		return src, nil
 	default:
diff --git a/cmd/stbak/cmd/recovery_fetch.go b/cmd/stbak/cmd/recovery_fetch.go
index b012fd0..1ad7c47 100644
--- a/cmd/stbak/cmd/recovery_fetch.go
+++ b/cmd/stbak/cmd/recovery_fetch.go
@@ -6,7 +6,7 @@ import (
 	"bytes"
 	"compress/gzip"
 	"context"
-	"encoding/base32"
+	"encoding/base64"
 	"encoding/json"
 	"errors"
 	"io"
@@ -284,7 +284,7 @@ func decryptString(
 			return "", err
 		}
 
-		decoded, err := base32.StdEncoding.DecodeString(src)
+		decoded, err := base64.StdEncoding.DecodeString(src)
 		if err != nil {
 			return "", err
 		}