InputTestHub

htpasswd Generator

Generates .htpasswd lines for Apache basic authentication using APR1-MD5, SHA-1 or crypt.

Security Nothing uploaded No sign-up Free, unlimited
Security tool
Fill in the fields and press Generate.
In short htpasswd Generator is a free online tool on inputtesthub.com that generates .htpasswd lines for Apache basic authentication using APR1-MD5, SHA-1 or crypt. It needs no account, no download and no payment, and there is no daily usage limit. Everything is processed inside your own browser, so the data you paste is never uploaded to a server.

How to use the htpasswd Generator

  1. Fill in the fields with your own details.
  2. The generated code updates live in the output panel.
  3. Copy the code and paste it into your page, file or CMS.

About the htpasswd Generator

The htpasswd Generator generates .htpasswd lines for Apache basic authentication using APR1-MD5, SHA-1 or crypt. It runs as plain JavaScript inside the page, which means there is no upload step, no queue and no size limit imposed by a server — the only limit is your own device.

What people use it for

  • Password-protecting a staging directory on cPanel.
  • Adding basic auth to an admin path.
  • Generating credentials for a team.
Basic auth sends credentials on every request, protected only by HTTPS. It is fine for keeping a staging site private and wrong for protecting real user accounts.

Frequently asked questions

Does the htpasswd Generator cost anything?
There is no cost and no cap. The htpasswd Generator is not a demo of a paid product, so nothing is held back or watermarked.
Is my data uploaded anywhere?
No. The htpasswd Generator runs entirely in your browser using JavaScript. Nothing is transmitted, logged or stored, which you can verify yourself in the Network tab of your browser's developer tools.
When would I actually need the htpasswd Generator?
Typical uses: password-protecting a staging directory on cPanel. Adding basic auth to an admin path. Generating credentials for a team. It is built for exactly those cases rather than being a general-purpose tool with this bolted on.
What do people usually get wrong here?
Basic auth sends credentials on every request, protected only by HTTPS. It is fine for keeping a staging site private and wrong for protecting real user accounts.
Is there an app version?
Yes. The page is responsive and the utility works in Chrome, Safari, Firefox, Edge and Samsung Internet on both Android and iOS. There is no app to install and nothing to sign into.

Related security tools

All 100
04

Privacy Policy Generator

Generates a privacy policy covering what you collect, why, how long you keep it and the rights…

06

Disclaimer Generator

Generates disclaimers for affiliate links, advice, earnings claims and external content.