OS Manuals

/usr/bin/htpasswd

Apache HTTP Server (utilities)

From apache2-utils 2.4.70-r0 (os), captured 2026-11-07 by running htpasswd --help (exit 2). permalink

Usage:
	htpasswd [-cimB25dpsDv] [-C cost] [-r rounds] passwordfile username
	htpasswd -b[cmB25dpsDv] [-C cost] [-r rounds] passwordfile username password

	htpasswd -n[imB25dps] [-C cost] [-r rounds] username
	htpasswd -nb[mB25dps] [-C cost] [-r rounds] username password
 -c  Create a new file.
 -n  Don't update file; display results on stdout.
 -b  Use the password from the command line rather than prompting for it.
 -i  Read password from stdin without verification (for script usage).
 -m  Force MD5 hashing of the password (default).
 -2  Force SHA-256 hashing of the password (secure).
 -5  Force SHA-512 hashing of the password (secure).
 -B  Force bcrypt hashing of the password (very secure).
 -C  Set the computing time used for the bcrypt algorithm
     (higher is more secure but slower, default: 5, valid: 4 to 17).
 -r  Set the number of rounds used for the SHA-256, SHA-512 algorithms
     (higher is more secure but slower, default: 5000).
 -d  Force CRYPT hashing of the password (8 chars max, insecure).
 -s  Force SHA-1 hashing of the password (insecure).
 -p  Do not hash the password (plaintext, insecure).
 -D  Delete the specified user.
 -v  Verify password for the specified user.
On other systems than Windows and NetWare the '-p' flag will probably not work.
The SHA-1 algorithm does not use a salt and is less secure than the MD5 algorithm.
Options (15)
OptionDescriptionSource
-cCreate the passwdfile.help + man
-nDisplay the results on standard output rather than updating a file.help + man
-bUse the password from the command line rather than prompting for it.help + man
-iRead the password from stdin without verification (for script usage).help + man
-mForce MD5 hashing of the password (default).help + man
-2Force SHA-256 hashing of the password (secure).help + man
-5Force SHA-512 hashing of the password (secure).help + man
-BForce bcrypt hashing of the password (very secure).help + man
-CSet the computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 17).help + man
-rSet the number of rounds used for the SHA-256, SHA-512 algorithms (higher is more secure but slower, default: 5000).help + man
-dForce CRYPT hashing of the password (8 chars max, insecure).help + man
-sForce SHA-1 hashing of the password (insecure).help + man
-pDo not hash the password (plaintext, insecure).help + man
-DDelete the specified user.help + man
-vVerify password for the specified user.help + man
Exit status (7) from the manual page
1it encounters some problem accessing files
2there was a syntax problem with the command line
3the password was entered interactively and the verification entry didn't match
4its operation was interrupted
5a value is too long (username
6the username contains illegal characters (see the Restrictions section)
7the file is not a valid password file
Examples (3) from the manual page, untested

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.