htpasswd Generator (APR1 & bcrypt)
Create Apache/Nginx basic-auth password entries.
About this tool
HTTP basic authentication in Apache and Nginx reads credentials from an .htpasswd file, one user:hash line per account. This tool generates those lines using APR1 (Apache's salted MD5 variant) or bcrypt (the more secure modern choice), so you can protect a directory without running the htpasswd command locally.
The username and password are combined into a standard entry ready to paste into your .htpasswd file. Hashing runs entirely in your browser — the password is never transmitted.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Frequently asked questions about htpasswd Generator
Should I use APR1 or bcrypt for htpasswd?+
Use bcrypt if your Apache (2.4+) or Nginx build supports it — it is far harder to crack than APR1's MD5-based scheme. APR1 remains widely compatible and is fine for low-stakes internal tools, but bcrypt is the better choice for anything exposed.
How do I use the generated line?+
Append the user:hash line to your .htpasswd file (one per user), then point your web server's auth config at that file — AuthUserFile in Apache, or auth_basic_user_file in Nginx. Reload the server to apply.
Is the password sent to a server?+
No. The hash is computed in your browser and only the resulting entry is shown. Nothing you type leaves your device.
Related tools
PBKDF2 Derivation
Derive keys from passwords with salt and iterations
ARGON2 · MEMORY-HARDArgon2 Hasher
The password-hashing competition winner, memory-hard
BCRYPT · COSTBcrypt Hasher
Hash and verify passwords with the bcrypt standard
SCRYPT · N/r/pScrypt Calculator
Memory-hard key derivation with tunable N, r, p