Htpasswd Generator
Generate Apache .htpasswd entries with bcrypt or SHA-1.
Creates an Apache .htpasswd line as username:hash. bcrypt is recommended; SHA-1 is legacy. Everything runs in your browser and passwords are never uploaded.
100% private - runs entirely in your browser.
Your input, keys and passwords are never uploaded. Want proof? Load this page, then turn off your internet - the tool still works. For an exact check, open your browser's DevTools Network tab and confirm no data is sent when you use it.
About the Htpasswd Generator
Generate an Apache .htpasswd entry as username:hash for HTTP basic authentication.
Choose bcrypt, which is recommended, or the legacy SHA-1 ({SHA}) format.
Everything runs in your browser, so passwords are never uploaded.
Key features
- bcrypt and SHA-1 formats
- Ready-to-paste username:hash line
- Secure random salt for bcrypt
- Runs entirely in your browser
How to use
- 1Enter a username and choose an algorithm.
- 2Enter the password.
- 3Copy the .htpasswd entry.
Examples
admin + passwordadmin:$2b$10$...A salted bcrypt hash, different each time.
admin + passwordadmin:{SHA}...The legacy Apache SHA-1 format.
Frequently asked questions
- Which algorithm should I use?
- bcrypt is the recommended, secure choice. SHA-1 ({SHA}) is legacy and only for older setups.
- How do I use the entry?
- Add the username:hash line to your .htpasswd file and point your Apache or Nginx basic auth config at it.
- Is my password uploaded?
- No. The entry is generated entirely in your browser.