# htpasswd Generator

> Create Apache and Nginx basic-auth credentials with bcrypt, SHA-1 or MD5-crypt.

An .htpasswd file stores usernames and hashed passwords for HTTP basic authentication in Apache and Nginx. This generator produces the line using bcrypt — salted and deliberately slow — with the $2y$ prefix Apache expects, and can merge the entry into an existing file.

**URL:** https://convertto.tech/t/htpasswd-generator
**Category:** Hash & Crypto Tools (https://convertto.tech/c/crypto-tools)
**Privacy:** Runs entirely in the browser; no upload
**Cost:** Free, no sign-up
**Last updated:** 2026-08-01

## Key facts

- **Privacy:** Runs entirely in your browser — nothing is uploaded
- **Cost:** Free, unlimited, no sign-up

## How to use

1. Enter or paste your username.
2. Enter the password — it stays in your browser and is never sent anywhere.
3. Choose the hash.
4. Set the bcrypt cost.
5. Enter or paste your existing .htpasswd (optional).
6. Press Run, then download the result when it is ready.

## FAQ

### Is basic auth secure?

Only over HTTPS. The credentials are base64-encoded, not encrypted, and are sent on every single request — over plain HTTP anyone on the network reads them directly. Over TLS it is adequate for simple access control.

## Related tools

- [Log File Parser](https://convertto.tech/t/log-parser): Parse Apache, Nginx or JSON log lines into a sortable table with traffic summaries.
- [Sample Log File Generator](https://convertto.tech/t/sample-log-generator): Generate realistic Apache, Nginx, JSON, syslog or application logs with a controllable error rate.
- [Bcrypt Hash Generator](https://convertto.tech/t/bcrypt-hash-generator): Hash a password with bcrypt at a configurable cost factor — the right way to store passwords.
- [Redirect Rule Generator](https://convertto.tech/t/redirect-generator): Generate redirect rules for Apache, Nginx, Netlify, Vercel and Next.js.
- [AES Text Encryptor](https://convertto.tech/t/aes-text-encryptor): Encrypt and decrypt text with AES-256-GCM and a passphrase, entirely in your browser.
- [X.509 Certificate Decoder](https://convertto.tech/t/certificate-decoder): Decode a PEM certificate to see its subject, issuer, validity, SANs and key details.
- [CRC32 Checksum Calculator](https://convertto.tech/t/crc32-checksum): Calculate a CRC32 checksum — the fast error-detection code used in ZIP and PNG files.
- [File Hash & Checksum Calculator](https://convertto.tech/t/file-hash-calculator): Compute SHA-256, SHA-384, SHA-512 or SHA-1 for any file and verify it against a checksum.