Htpasswd & Password Generator
Generates a random password with a bit-entropy readout, then hashes it as APR1-MD5, bcrypt, and SSHA, ready to paste into an Apache or nginx htpasswd file. Everything, including the hashing, happens in your browser: nothing is sent anywhere.
📖 Guide: htpasswd hash formats explained
Last updated: August 30, 2026
Generate a password
Hash for htpasswd
Which format should I use?
| Apache | Either works. APR1-MD5 (htpasswd -m) is Apache's own default; bcrypt (htpasswd -B) is Apache's own documented recommendation for new deployments. |
|---|---|
| nginx | nginx's auth_basic module does not support bcrypt at all. Use APR1-MD5 or SSHA. |