Which encryption algorithm is recommended?

bcrypt is strongly recommended. It includes built-in salting and iteration count (cost factor 10), making it highly resistant to brute-force attacks. MD5 and SHA-1 are known to have security weaknesses and are not recommended for new projects. Apache 2.4+ and Nginx support bcrypt format ($2y$ prefix).

Is my password sent to any server?

No. All encryption calculations are done locally in your browser. Your password never leaves your device. The Web Crypto API is used for secure hash computation. The generated hash can be safely stored in the .htpasswd file on your server since hashes are one-way and irreversible.

Free Online htpasswd Generator - Apache/Nginx Basic Auth, bcrypt

Generate htpasswd Hash

Username

Password

Algorithm

📋 Result

.htpasswd file content: Enter username and password then click "Generate"...

📖 How to Use

1. Enter Credentials: Fill in username and password, select algorithm (bcrypt recommended).

2. Generate Hash: Click "Generate" — the hash is computed in your browser.

3. Copy & Use: Add the generated string to your server's .htpasswd file.

❓ FAQ

What is this tool for?

htpasswd creates password files (.htpasswd) for Apache/Nginx HTTP basic authentication. This tool uses the Web Crypto API to generate encrypted hashes locally in your browser, supporting bcrypt (recommended), SHA-256, SHA-512, MD5, SHA-1, and crypt algorithms.

Which algorithm is recommended?

bcrypt is strongly recommended. It includes built-in salting and a cost factor of 10 (1024 iterations), making it highly resistant to brute-force attacks. MD5 and SHA-1 have known weaknesses. Apache 2.4+ and Nginx support bcrypt format ($2y$ prefix).

Is my password sent anywhere?

No. All encryption runs locally in your browser. Your password never leaves your device. The Web Crypto API provides secure hash computation. The resulting hash is one-way and can be safely stored in your server's .htpasswd file.

🔐 htpasswd Generator