Create htpasswd credentials
The line for the file and the block for the .htaccess, both at once.
What you type is processed in your browser and never sent to us.
How to do it
-
Enter a user name and password
The user name must not contain a colon.
-
Generate the line
Hashing takes a moment; that is bcrypt doing its job.
-
Copy both parts
The line goes in the file, the block in the .htaccess.
What this is for
Basic authentication needs two things that are usually documented separately: a line in the password file and a block in the .htaccess. Both are produced here together.
The hash is bcrypt, written in the $2y$ form that Apache expects, and it is computed in your browser – the password itself is never sent.
Common questions
No. It is hashed in your browser.
Apache and PHP write and expect $2y. The hashes are otherwise identical.
Outside the publicly reachable directory – otherwise it can be fetched through the browser. The path in the .htaccess block has to be absolute.
Missing a tool? Tell us which one.