Lighttpd htdigest Generator - HTTP Digest Auth Passwords

Generate password hashes for Lighttpd mod_auth. Create htdigest MD5 or htpasswd plain/crypt credentials. Browser-based, no server upload.

Username

Password

Authentication Method

Digest (htdigest) Recommended

More secure, password not sent over network

Basic (htpasswd)

Simpler, requires HTTPS for security

Realm

Shown in login dialog, part of digest hash

Credential Entry

Lighttpd Configuration

# lighttpd.conf
server.modules += ( "mod_auth" )

# For digest auth (htdigest)
auth.backend = "htdigest"
auth.backend.htdigest.userfile = "/etc/lighttpd/.htdigest"

# Protect a path
auth.require = (
    "/admin/" => (
        "method"  => "digest",
        "realm"   => "Restricted Area",
        "require" => "valid-user"
    )
)

Credentials File

HAProxy Password Generator - Create user…

Caddy htpasswd Generator - bcrypt Hash f…

Traefik basicauth Generator - Middleware…

Apache htpasswd Generator - Create Passw…

SSH Config Generator - Create ~/.ssh/con…

View all Security generators →

Frequently Asked Questions

Lighttpd's mod_auth supports basic and digest authentication. Digest is more secure as passwords aren't sent in cleartext. Use htdigest for digest auth, htpasswd for basic.

htdigest stores credentials as username:realm:MD5(username:realm:password). The realm is included in the hash, so you need to match it in your server config.

Digest authentication sends a hash of the password + challenge, not the password itself. Even without HTTPS, the actual password isn't transmitted over the network.

Lighttpd supports htdigest, htpasswd, plain (plaintext - never use in production), and ldap backends via mod_auth configuration.

Enable mod_auth, set auth.backend to htdigest/htpasswd, specify auth.backend.htdigest.userfile or auth.backend.htpasswd.userfile, then use auth.require for protected paths.

The realm is a string identifying the protected area, shown to users in the login dialog. It's part of the hash, so changing realm invalidates existing passwords.

Yes, for basic auth. Set auth.backend = 'htpasswd' and point auth.backend.htpasswd.userfile to your .htpasswd file. Lighttpd supports crypt and MD5 formats.

Use htdigest with digest authentication for best security without HTTPS. If you have HTTPS, htpasswd with basic auth is simpler and equally secure over encrypted connections.

Use auth.require: auth.require = ( "/admin/" => ( "method" => "digest", "realm" => "Admin", "require" => "valid-user" ) ).

Yes. Each protected path can have its own realm. Users may need different credentials for different realms since the realm is part of the htdigest hash.

Related Tools