htpasswd Generator

Create a hashed password to write into a .htpasswd file

Features

Supports 4 encryption methods

Choose bcrypt, MD5 (APR), SHA-1, or crypt

Generate multiple users at once

Add rows to create a .htpasswd all at once

Adjust the bcrypt cost value

Finely set the hash strength from 4 to 31

Copy and save the generated result

Save it as .htpasswd with one click

How to use

1

Enter the username and password

Fill in each row with the username used for authentication and any password

2

Select the encryption method to use

Specify the method that fits your purpose from MD5 (APR), SHA-1, crypt, or bcrypt

3

Add as many input fields as needed

Use the add button to add input fields 5 at a time and register multiple users together

4

Press the generate button to get the result

Press the generate button and copy or download the .htpasswd-format string

Use cases

Setting up Basic authentication

Quickly prepare the credentials to write into Apache's .htpasswd

Protecting member-only pages

Apply access restrictions to sites under development or to limited-release pages

Registering multiple accounts at once

Issue credentials for all team members together and distribute them

Matching an existing method

Choose the encryption method your server supports to fit even legacy environments

Basic Knowledge

What is Basic Authentication

Basic authentication is a simple access restriction method used by web servers that prompts users to enter an ID and password before accessing a page. It is commonly used to protect pre-launch sites and member-only pages.

What is .htpasswd

.htpasswd is a file that stores pairs of usernames and hashed passwords used in Basic authentication. Passwords are converted into a form that cannot be reverted to their original string.

What is bcrypt

bcrypt is a hashing method designed for passwords with intentionally slow computation. It is resistant to brute-force attacks, and increasing the cost parameter makes decryption even more difficult.

Safety and Privacy

Runs entirely in your browser

Your input data is processed only within your browser and is never sent externally.

Processing only in your browser

generating hashes is processed entirely within your browser, and input data is not sent to any server.

Communications encrypted with HTTPS

Page loading is also encrypted by TLS, and content cannot be read by third parties.

No transmission to third parties

Input content is not sent to external services such as ad networks or trackers.

No automatic saving of results

the password you enter and input suggestions are not stored on the server.

Follow RAKKOTOOLS on Google Search

175 useful tools become easier to find from Google Search and AI Search!

  • Found in search
  • Also shown in AI Search
  • Discover new tools
Related Tools