Skip to content
Convertto

htpasswd Generator

Create Apache and Nginx basic-auth credentials with bcrypt, SHA-1 or MD5-crypt.

An .htpasswd file stores usernames and hashed passwords for HTTP basic authentication in Apache and Nginx. This generator produces the line using bcrypt — salted and deliberately slow — with the $2y$ prefix Apache expects, and can merge the entry into an existing file.

Runs in your browser
Privacy
Runs entirely in your browser — nothing is uploaded
Cost
Free, unlimited, no sign-up

Frequently asked questions

Is basic auth secure?

Only over HTTPS. The credentials are base64-encoded, not encrypted, and are sent on every single request — over plain HTTP anyone on the network reads them directly. Over TLS it is adequate for simple access control.

How to use the htpasswd generator

  1. 1Enter or paste your username.
  2. 2Enter the password — it stays in your browser and is never sent anywhere.
  3. 3Choose the hash.
  4. 4Set the bcrypt cost.
  5. 5Enter or paste your existing .htpasswd (optional).
  6. 6Press Run, then download the result when it is ready.

Embed this tool

Put the working htpasswd generator on your own site. It runs in your visitors' browsers exactly as it does here — free, no account, nothing uploaded.

Share this tool

Last updated

More hash & crypto tools