Generate .htpasswd entries (bcrypt, apr1/MD5 or SHA) for Apache and Nginx, all in the browser, without sending the password.
The .htpasswd file stores username and (hashed) password pairs used by Apache and Nginx HTTP Basic authentication, that little login prompt protecting a folder or panel. Each line has the format username:hash. This tool generates those lines with three algorithms: bcrypt (the recommended one today, strong and with a cost factor, written with the $2y$ prefix Apache uses), apr1 (Apache's own MD5 scheme, still very common and compatible with older servers) and SHA (SHA-1 in base64, without a salt, weak, included only for legacy compatibility). You can add several users and copy the whole file. Because the apr1 and SHA hashing and the bcrypt generation run locally, your passwords never leave the browser, unlike online generators that process on the server.
Paste the code into your HTML and the tool shows up on your page, without J-Kit's navigation and ads. It still runs in the browser of whoever visits your site.
<iframe
src="https://jkit.tools/embed/en-US/htpasswd-generator"
width="100%"
height="600"
style="border:0"
loading="lazy"
title=".htpasswd Generator"
></iframe>These references help contextualize formulas, standards, APIs and limitations used on this page. They do not replace professional validation when a result has legal, financial, medical or operational impact.
Use bcrypt whenever possible, it's the strongest, with a salt and cost factor, and supported by Apache (2.4+) and by Nginx with bcrypt. apr1 (Apache MD5) is a compatible alternative for older servers, but weaker. SHA (SHA-1 without a salt) is fragile and is here only for legacy compatibility; avoid it in production.
Enter a username and password, pick the algorithm and add it. You can collect several users and copy the full .htpasswd file at once. Everything is computed in your browser.
For safety, the hash (bcrypt, apr1 or SHA) is computed entirely in your browser, using WebCrypto randomness. Neither the username nor the password is sent to any server.