htpasswd generator
Enter a username and password to build a file line. Hashing is local. FlashKit never sees the password unless you are on a compromised machine.
This implements SHA-1 ({SHA}) and plain text. It does not implement bcrypt/APR1. Plain text is only for throwaway local tests.
How to Use
- Type the username and a unique password (use the password generator).
- Choose SHA for classic Apache basic auth.
- Copy the line into .htpasswd. Point .htaccess AuthUserFile at it.
- Use HTTPS. Basic auth without TLS sends credentials in an easily decoded header.
Key Features
- Local SHA-1 htpasswd line
- No FlashKit account
- Pairs with .htaccess and password tools
- Honest that bcrypt is not included
Frequently Asked Questions
Is SHA-1 htpasswd still recommended?
It is what many shared hosts still accept. Prefer your platform’s SSO or bcrypt-capable auth for anything sensitive.
Do you store the password?
No. Close the tab on shared computers.