Server Config

These tools cover the checks worth doing before you apply a change to a web server. You can generate an .htpasswd file for basic authentication, validate .htaccess syntax, review a Content-Security-Policy declaration, and audit the security headers a live site returns.

.htpasswd File Generator

Generate .htpasswd files for Apache and Nginx Basic Authentication securely in your browser. Supports bcrypt, APR1-MD5, and SHA-1. Passwords are never sent to the server.

CSP Header Validator

Paste a Content-Security-Policy header value to validate its directives and source values in one pass. Detects risky settings like unsafe-inline, a missing default-src fallback, and typos in directive names, and shows ev...

Security Headers Checker

Enter any site URL to check whether key security headers such as HSTS, CSP, and X-Frame-Options are properly configured. See which headers are missing or weak, along with tips for fixing each one.

.htaccess Syntax Checker

Paste the contents of an .htaccess file to instantly catch common mistakes: unclosed block tags, misspelled directive names, RewriteRule with too few arguments, and dangling RewriteCond lines.