Easily generate secure entries for your Apache `.htpasswd` and `.htaccess` files. Supports modern Bcrypt, legacy SHA-1, and Plain Text hashing directly in your browser.
An .htpasswd file is a flat-file used to store usernames and passwords for basic authentication on Apache HTTP Servers. It works in conjunction with an .htaccess file to restrict access to specific directories on your website.
$2y$ prefix.{SHA} prefix. While widely supported across almost all platforms, it does not use salting by default and is considered vulnerable to dictionary attacks. Use only if your server doesn't support Bcrypt.admin:$2y$10$...) and paste it into a file named exactly .htpasswd on your server. Then reference that file's absolute path in your .htaccess setup.