{"id":118,"date":"2026-08-19T23:50:05","date_gmt":"2026-08-19T23:50:05","guid":{"rendered":"https:\/\/netguide.io\/tools\/htpasswd-generator-2\/"},"modified":"2026-08-19T23:50:40","modified_gmt":"2026-08-19T23:50:40","slug":"htpasswd-basic-auth-generator","status":"publish","type":"post","link":"https:\/\/netguide.io\/tools\/en\/htpasswd-basic-auth-generator\/","title":{"rendered":"htpasswd Generator"},"content":{"rendered":"<div id=\"netgu-632814755\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<style>\n.wp-ht-container { max-width:100%; background:#fff; padding:20px; border:1px solid #ddd; border-radius:10px; font-family:-apple-system, sans-serif; color:#333; }\n.wp-ht-title { margin:0 0 15px 0; color:#2271b1; font-size:1.4rem; }\n.wp-ht-grid { display:grid; grid-template-columns:repeat(auto-fit, minmax(140px, 1fr)); gap:12px; margin-bottom:10px; }\n.wp-ht-input-group label { display:block; font-size:11px; font-weight:bold; margin-bottom:4px; text-transform:uppercase; color:#666; }\n.wp-ht-input-group input, .wp-ht-input-group select { width:100%; padding:8px; border:1px solid #ccc; border-radius:4px; box-sizing:border-box; }\n.wp-ht-checkbox-group { margin:15px 0; font-size:12px; display:flex; align-items:center; gap:8px; color:#666; }\n.wp-ht-note { font-size:12px; color:#666; margin-top:12px; min-height:1em; }\n.wp-ht-warn { color:#d63638; font-weight:bold; }\n.wp-ht-results { margin-top:20px; border-top:2px solid #eee; padding-top:15px; }\n.wp-ht-res-item { display:flex; justify-content:space-between; margin-bottom:6px; font-size:14px; gap:10px; }\n.wp-ht-total { font-weight:bold; font-size:18px; color:#2271b1; margin:10px 0; padding:5px 0; border-top:1px solid #eee; border-bottom:1px solid #eee; }\n.wp-ht-val { color:#2271b1; font-weight:bold; }\n.wp-ht-out { width:100%; box-sizing:border-box; padding:10px; border:1px solid #ccc; border-radius:4px; font-family:monospace; font-size:13px; word-break:break-all; background:#f7f7f7; margin-top:6px; }\n.wp-ht-btn { background:#2271b1; color:#fff; border:none; padding:9px 14px; border-radius:4px; cursor:pointer; font-size:13px; margin-top:10px; }\n<\/style>\n<div class=\"wp-ht-container\">\n  <h3 class=\"wp-ht-title\">htpasswd Generator<\/h3>\n  <div class=\"wp-ht-grid\">\n    <div class=\"wp-ht-input-group\"><label>Username<\/label><input type=\"text\" id=\"ht-user\" value=\"admin\" oninput=\"genHt()\"><\/div>\n    <div class=\"wp-ht-input-group\"><label>Password<\/label><input type=\"text\" id=\"ht-pass\" value=\"\" placeholder=\"Enter password\u2026\" oninput=\"genHt()\"><\/div>\n    <div class=\"wp-ht-input-group\"><label>Algorithm<\/label><select id=\"ht-mode\" onchange=\"genHt()\"><option value=\"ssha\">SSHA (recommended, salted)<\/option><option value=\"sha\">SHA (unsalted)<\/option><\/select><\/div>\n  <\/div>\n  <label class=\"wp-ht-input-group\" style=\"display:block; margin-top:6px;\"><span style=\"display:block; font-size:11px; font-weight:bold; text-transform:uppercase; color:#666; margin-bottom:4px;\">.htpasswd line<\/span><\/label>\n  <input type=\"text\" id=\"ht-out\" class=\"wp-ht-out\" readonly value=\"\">\n  <button class=\"wp-ht-btn\" onclick=\"copyHt()\">Copy<\/button>\n  <div class=\"wp-ht-note\">For bcrypt ($2y$) use the CLI: htpasswd -B. SSHA\/SHA work with Nginx and Apache. Everything is computed locally in the browser \u2013 no password leaves your machine.<\/div>\n<\/div>\n<script>\nfunction wpHtB64(u8){ var s=''; for(var i=0;i<u8.length;i++){ s+=String.fromCharCode(u8[i]); } return btoa(s); }\nasync function genHt(){\n  var u=document.getElementById('ht-user').value.trim();\n  var p=document.getElementById('ht-pass').value;\n  var mode=document.getElementById('ht-mode').value;\n  var out=document.getElementById('ht-out');\n  if(!u || !p){ out.value=''; return; }\n  var enc=new TextEncoder();\n  if(mode==='sha'){\n    var dig=await crypto.subtle.digest('SHA-1', enc.encode(p));\n    out.value=u+':{SHA}'+wpHtB64(new Uint8Array(dig));\n  } else {\n    var salt=new Uint8Array(4); crypto.getRandomValues(salt);\n    var pb=enc.encode(p);\n    var data=new Uint8Array(pb.length+salt.length); data.set(pb,0); data.set(salt,pb.length);\n    var dig=await crypto.subtle.digest('SHA-1', data);\n    var d=new Uint8Array(dig);\n    var comb=new Uint8Array(d.length+salt.length); comb.set(d,0); comb.set(salt,d.length);\n    out.value=u+':{SSHA}'+wpHtB64(comb);\n  }\n}\nfunction copyHt(){ var o=document.getElementById('ht-out'); if(!o.value)return; o.focus(); o.select(); try{ navigator.clipboard.writeText(o.value); }catch(e){} }\ngenHt();\n<\/script>\n\n\n<div id=\"netgu-2939081690\"><script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- NetGuide.io-After-Widget-Tools -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-6258556257245998\"\r\n     data-ad-slot=\"5175852350\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">How the htpasswd generator works<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The tool generates a ready-to-use <code>.htpasswd<\/code> line in the format <code>user:hash<\/code> for HTTP basic authentication. The computation runs entirely in the browser via the Web Crypto API \u2013 username and password are never transmitted.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>SSHA (recommended):<\/strong> Salted SHA-1 hash. Thanks to the random salt, the same password produces a different hash every time \u2013 far more resistant to rainbow tables.<\/li>\n\n\n<li><strong>SHA:<\/strong> Unsalted SHA-1 hash in <code>{SHA}<\/code> format. Simple, but without a salt.<\/li>\n\n\n<li><strong>Compatibility:<\/strong> Both formats are understood by Nginx (<code>auth_basic<\/code>) and Apache.<\/li>\n\n\n<li><strong>bcrypt:<\/strong> For <code>$2y$<\/code> hashes (Apache only) use <code>htpasswd -B user<\/code> on the command line.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Using it in Nginx: place the file at <code>\/etc\/nginx\/.htpasswd<\/code> and set <code>auth_basic \"Restricted\";<\/code> and <code>auth_basic_user_file \/etc\/nginx\/.htpasswd;<\/code> in the server block.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Related tools<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><a href=\"\/tools\/en\/password-generator\/\">Password Generator<\/a><\/li>\n\n\n<li><a href=\"\/tools\/en\/ssh-key-generator\/\">SSH Key Generator<\/a><\/li>\n<\/ul>\n\n\n<div id=\"netgu-2401752911\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Generate a .htpasswd line for Basic Auth (SSHA or SHA) \u2013 compatible with Nginx and Apache. Runs entirely in the browser, no server roundtrip.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[160],"tags":[],"class_list":["post-118","post","type-post","status-publish","format-standard","hentry","category-generatoren-en"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/posts\/118","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/comments?post=118"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/posts\/118\/revisions"}],"predecessor-version":[{"id":120,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/posts\/118\/revisions\/120"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/media?parent=118"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/categories?post=118"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/tools\/wp-json\/wp\/v2\/tags?post=118"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}