About this tool
Produce an htpasswd line for Apache or nginx basic authentication using APR1-MD5 (the $apr1$ format) or SHA-1, and verify whether a candidate password matches an existing hash.
The verifier also recognises the formats it cannot check — bcrypt ($2y$), Linux md5crypt ($1$) and traditional DES crypt — and names each one with the command to use instead, rather than reporting an unrecognised hash.
Hashing happens entirely in your browser with a cryptographically random salt, so the password is never transmitted — unlike server-side htpasswd generators, where you are handing your credential to someone else.