Which hash format should I choose?

Bcrypt ($apr1$ prefix) is the most secure option supported by modern Apache. MD5-APR is widely compatible but weaker.

Can I add multiple users to one .htpasswd file?

Generate each user separately and append each line to your .htpasswd file, one user per line.

Yes. Nginx auth_basic_user_file directive reads standard .htpasswd files with bcrypt or crypt hashes.

Yes. A sample .htaccess snippet with the correct AuthType and Require valid-user lines is shown alongside the hash.

Enter username and password to generate a ready-to-paste .htpasswd line.

Username Password

Note: Apache md5crypt ($apr1$) requires server-side generation. Showing SHA1-based htpasswd instead.

Enter username and password to generate a ready-to-paste .htpasswd line.

Last updated: 2026-06-09 · Reviewed by Nham Vu