How do I set up basic authentication using .htaccess?

How do I set up basic authentication using .htaccess?

To set up basic authentication, you need to create a .htaccess file in your web directory and add the following lines:

AuthType Basic
AuthName "Restricted Area"
AuthUserFile /path/to/.htpasswd
Require valid-user

Make sure to replace /path/to/.htpasswd with the actual path to your .htpasswd file.

What should I include in the .htpasswd file?

.htpasswd should contain usernames and their corresponding hashed passwords. You can generate this using the command line with the command htpasswd -c /path/to/.htpasswd username.

Can I restrict access to specific IP addresses as well?

Yes, you can restrict access by adding the following lines to your .htaccess file:

Order Deny,Allow
Deny from all
Allow from xxx.xxx.xxx.xxx

Replace xxx.xxx.xxx.xxx with the allowed IP address.

What if I want to allow multiple IP addresses?

You can add multiple Allow from lines for each IP address you want to permit, like this:

Allow from xxx.xxx.xxx.xxx
Allow from yyy.yyy.yyy.yyy