.htpasswd Generator
Generate and verify .htpasswd entries for HTTP Basic Auth – bcrypt, APR1-MD5 or SHA-1 – plus the matching Apache and Nginx config.
Hash a password with bcrypt and check a password against an existing hash. Choose the cost factor and the prefix – $2y$ for PHP's password_hash(), $2b$ for OpenBSD, Node and Python, $2a$ for legacy systems – and copy ready-made snippets for PHP and Laravel.
Good to know: bcrypt only uses the first 72 bytes of a password, and a cost of 10–12 is the usual sweet spot – every +1 doubles the work for you and for an attacker.
Runs entirely in your browser – nothing you enter leaves this page.
No comments yet.
Log in to write a comment or reply. A moderator checks every comment before it appears – for security and to keep spam and abuse out.