Hunterloft662

1. How To Decrypt Htpasswd Passwords
2. Sql Server Decrypt Password

Create the Password File. We now have access to the htpasswd command. We can use this to create a password file that Apache can use to authenticate users. We will create a hidden file for this purpose called.htpasswd within our /etc/apache2 configuration directory. Htpasswd generator - password encryption. Totally different: Facebook emoticons. This web app contains a JavaScript port of Apache server's htpasswd.

Here you can encrypt passwords for use with password protection with .htaccess and .htpasswd. This functionality is standard on the Apache webserver and works in all normal browsers. Encrypting passwords means they are not send or stored in clear text.

Enter username and password to encrypt the password and get the resultant line to enter in your .htpasswd file. One line for each user.

Encrypt password for .htpasswd

Usernames and passwords entered here are not stored, not disclosed to third party, or used in any other way than to provide this service.

Example line in a .htpasswd file with the username 'userdude' and password 'password':

.htpasswd

The PHP code encrypting the password:

Encryption source code

How to Setup

Attention: the files must be named as .htaccess and .htpasswd. Files prefixed with .ht will by default not be send to clients by the Apache webserver and if somebody makes a request they will get an error 403 Forbidden.

How To Decrypt Htpasswd Passwords

The htaccess file must contain the following lines and be placed in the folder with the content to protect:

.htaccess

The above will protect an entire folder, if only specific files should be protected replace the line require valid-user with:

.htaccess

It's possible to add multiple entries and add multiple users to an entry.

.htaccess

Path to AuthUserFile

For the system to work the correct path to .htpasswd must be set on the AuthUserFile line in .htaccess. The absolute path to the file on the server must be used and to obtain this you can upload a file to the directory where you're going to store .htpasswd (can be deleted again after use):

temp.php

The ouput will be something like:

temp.php output

And in .htaccess it will then be:

.htaccess

An example folder structure could be:

Folder structure example

When the setup is in place users will be prompted to enter credentials when requesting the pages and files specified.

This page could also be of interest: HTTP authentication with PHP.

Hashing algorithms

Sql Server Decrypt Password

bcrypt $2y$ or $2a$ prefix

This algorithm is currently considered to be very secure. Bcrypt hashes are very slow to compute (which is one one the reasons why they are secure). The cost parameter sets the computing time used (higher is more secure but slower, default: 5, valid: 4 to 31).
Warning : think carefully before you try values above 10, this thing is really slow. You could freeze your computer.
Compatibility : Apache since version 2.4 (needs apr-util 1.5+)

md5 (APR) $apr1$ prefix

Apache-specific algorithm using an iterated (1,000 times) MD5 digest of various combinations of a random salt and the password. This is the default (since Apache version 2.2.18).
Compatibility : all Apache versions, Nginx 1.0.3+.

crypt(), also known as crypt(3) no prefix

It used to be the default algorithm until Apache version 2.2.17. It limits the password length to 8 characters. Considered insecure.
Compatibility : all Apache and Nginx versions, Unix only. Plain ASCII characters only.

salted sha-1 {SSHA} prefix

Considered insecure. The use of salt makes it more time-consuming to crack a list of passwords. However, it does not make dictionary attacks harder when cracking a single password.
Compatibility : Nginx 1.0.3+ only.

sha-1 {SHA} prefix

Facilitates migration from/to Netscape servers using the LDAP Directory Interchange Format (ldif). This algorithm is insecure by today's standards.
Compatibility : all Apache versions, Nginx 1.3.13+.

Plaintext (no hashing) no prefix for Apache, {PLAIN} for Nginx

Use plaintext passwords. Insecure.
Compatibility : all Windows and Netware Apache versions, Nginx 1.0.3+.