Htpasswd Generator - Create Apache Password Hashes

Generate .htpasswd Entries

Create password hashes for Apache HTTP basic authentication. All hashing happens in your browser.

About .htpasswd Files

An .htpasswd file is used with Apache HTTP Server to implement basic authentication. Each line contains a username and a hashed password separated by a colon.

Supported Hash Algorithms

• SHA-1: Uses SHA-1 hashing with Base64 encoding. Secure and widely supported. Recommended for production.
• MD5: A simplified MD5 hash. Less secure but compatible with many systems. Use only if required.
• Plain text: No hashing - password stored as-is. Never use in production. Only for testing.

How to Use

1. Generate your .htpasswd entries using this tool

2. Save the output to a file named .htpasswd

3. Upload it to your server (typically outside your web root)

4. Configure Apache with an .htaccess file:

AuthType Basic
AuthName "Restricted Area"
AuthUserFile /path/to/.htpasswd
Require valid-user

Security Notes

• All processing happens in your browser - passwords never leave your device
• Use SHA-1 for production environments
• Never use plain text passwords in production
• Store .htpasswd files outside your web root directory
• Regularly rotate passwords and update hashes

Frequently Asked Questions

What is an .htpasswd file?

An .htpasswd file stores usernames and password hashes for HTTP basic authentication on Apache web servers. Each line contains a username:hash pair.

Which algorithm should I use?

Use SHA-1 for production. It is secure, fast, and supported by all modern Apache installations. Avoid plaintext and only use MD5 if required by legacy systems.

Is this safe for production passwords?

Yes. All hashing is done locally in your browser using the Web Crypto API. Your passwords never leave your device and are not sent to any server.

Where should I store the .htpasswd file?

Store the .htpasswd file outside your web root directory to prevent direct access. For example, if your web root is /var/www/html, place it in /var/www/.htpasswd.

Can I use this for nginx?

Yes, nginx supports the same .htpasswd format with SHA-1 hashes. The file format is identical to Apache.

Related Tools

• Simple Regex Tester -- Test a regex pattern against sample text
• Flexbox Playground -- Interactive CSS flexbox layout builder with live preview
• Bundle Size Budget Planner -- Plan and track your web application's bundle size budget across different chunks
• CSV to JSON Converter -- Convert CSV data to JSON format with auto-detection

Htpasswd Generator FAQ