.htpasswd generator

Generate a bcrypt .htpasswd entry for Basic authentication in your browser.

Inputs and results stay on your device

Basic authentication details

Use ASCII letters, numbers and . _ @ -
Up to 72 UTF-8 bytes (72 ASCII characters).

Results

Enter a username and password.

Your inputs and results are not sent or stored. Files are saved only when you click the save button.

How to use .htpasswd generator

  1. 01Enter the username and password for Basic authentication.
  2. 02Click “Generate .htpasswd” to create a username and bcrypt hash on one line.
  3. 03Copy the result or save the file, then configure authentication on your server.

About .htpasswd generator

Create a username and password hash for servers such as Apache. Output uses bcrypt ($2y$, cost 10). Server-side authentication configuration is required separately.

Protect a site in developmentCreate a staging-site loginAdd a user to an existing .htpasswd file

Using the generated entry

The result is one line in the form username:hash. Append it to an existing file to add a user, or replace the matching user’s line to change their password.

Saving the file does not enable authentication by itself. Configure your server separately, check support for $2y$ bcrypt, and ensure the file cannot be downloaded directly from the web.

Generate a password for Basic authentication

Frequently asked questions

Why does the same password produce different results?

A fresh random salt is used each time. Different hashes can still authenticate the same password.

Is there a password length limit?

The bcrypt limit is 72 UTF-8 bytes, or 72 ASCII characters. Other characters may take multiple bytes. Oversized passwords are rejected, not truncated.

Where should I put the file?

Store it outside publicly accessible web paths and reference it in your server’s authentication settings. Confirm bcrypt support and use HTTPS for protected pages.

Are my credentials sent or stored?

Inputs and results stay in this page and are not sent to Poco or saved in browser storage. Advertising and analytics scripts are disabled on this page.

Is it free to use?

Yes. All tools are free, with no account required.