.htpasswd File Generator (APR1-MD5)

Generate a line in Apache .htpasswd format (APR1-MD5) to password-protect a directory with Apache HTTP Server.

Example:
1 to 8 alphanumeric characters; leave empty for a random salt.

How it works

Apache HTTP Server uses .htpasswd files for HTTP Basic authentication protecting a directory: each line associates a username with a hashed password. The APR1-MD5 format (an Apache variant based on MD5) is a historical format still widely supported; it's exactly what the htpasswd command produces with the -m option. Paste the generated line directly into your .htpasswd file on the server.

Is APR1-MD5 still safe to use?

APR1-MD5 is still widely used for Apache basic authentication but is not as robust as bcrypt or argon2 against modern brute-force attacks. For simple directory protection (internal documentation, test area), it remains acceptable; for sensitive data, prefer a more robust authentication system upstream of the application.

How do I use the generated line?

Copy the full line (username:$apr1$salt$hash) into a .htpasswd file on your server, one line per user, then reference that file in the Apache configuration with the AuthType Basic and AuthUserFile directives.

<strong>100% local processing:</strong> the entered password is never sent to a server; hashing happens entirely in your browser via WebAssembly.