Free tool · runs in your browser
.htaccess Password Protection Generator
A second login in front of the WordPress backend costs attackers more than any plugin: whoever fails the basic-auth prompt never even sees wp-login.php. The generator creates both files including a correctly hashed password.
Directory Protection Generator
Generate .htaccess & .htpasswd
Add users, copy both files, done. The password is hashed locally and never leaves your browser.
What do you want to protect?
Your hosting panel shows the real path – or a PHP file containing <?php echo __DIR__;
Users
Username and password never leave your browser – the hash (APR1-MD5, htpasswd-compatible) is generated locally via JavaScript.
Everything is generated locally in your browser. Nothing you enter is transmitted to our server.
How it works
- 1 Enter username and password – the hash is created locally
- 2 Choose a directory or a single file as the target
- 3 Copy .htaccess and .htpasswd and upload them via FTP/SFTP
Guides for this tool
- Password-Protect a Directory with .htaccess and .htpasswd Protect part of your website with a password: how directory protection works, where the traps are – with a generator for .htaccess and .htpasswd.
- Securing wp-admin with Directory Protection – When It Works A second password in front of the WordPress login stops bot attacks before WordPress loads. When it works, when it breaks (WooCommerce!) – with a generator.
Related Services
More tools
- wp-config.php Generator
- Redirect Generator (301)
- PHP Limits Generator
- Restore WordPress Admin Access
- Cron Generator for WordPress
- SQL Generator: WordPress Database Cleanup
- Database Connection Test
- Caching Generator (.htaccess / Nginx)
- robots.txt for AI Crawlers
- llms.txt Generator
- Maintenance Page Generator
- Backup Planner
- Base64 Encode and Decode
- HTTP Status Checker
- All tools →