Is bcrypt better than $apr1$?

Yes — bcrypt is the modern recommendation. We use $apr1$ here because bcrypt is too slow for browsers. For a production .htpasswd, run htpasswd -B on the server.

Will Apache accept this format?

Yes. The $apr1$ MD5 format is the Apache default and is supported by every recent Apache version.

Files never leave your device

.htpasswd Generator

Generate Apache .htpasswd entries using bcrypt (the secure default) for HTTP Basic Authentication. Paste the line into your .htpasswd file.

Username

Password

For maximum security, prefer the bcrypt variant: htpasswd -B on a server. Bcrypt is computed CPU-side and not browser-friendly.

How to use htpasswd Generator

Type a username and password.
Click generate to produce a .htpasswd line.
Append the line to your server's /etc/apache2/.htpasswd file (or wherever you store it).

How to use htpasswd Generator

Frequently asked questions

Is bcrypt better than $apr1$?

Will Apache accept this format?