htaccess Generator

Show comments

Show comments in the .htaccess?

Cross origin requests

Allow cross-origin requests

Allow cross-origin images

Allow cross-origin web fonts

Allow Cross-origin resource timing

Internet Explorer

Render pages in the highest IE-mode?

Allow IFrame cookies?

Media types

Serve resources with the proper media types (f.k.a. MIME types)?

Character encodings

Serve `text/html` or `text/plain` with charset `UTF-8`?

Serve data interchange file types with charset `UTF-8`?

Compression

Enable compression?

Enable content transformation

Files

Enable file concatenation?

Enable filename-based cache busting

Expiration

Remove ETags

Enable expires headers?

Expires Default

Custom type expiration

Type

Expire time value

Expire time

Enable directory protection?

Settings (.htaccess)

Name of the proteced area

Path to the .htpasswd

Password encryption method
DES MD5 SHA1

Username

Password for the User

Your .htpasswd

Save below text inside a file called ".htpasswd". Please be sure that you have specified the real path to this file (see above in settings)

Error prevention

Disable the pattern matching based on filenames.

Custom error messages/pages

Error Code

Error document

Security

Enable Clickjacking-Protection?

Content Security Policy (CSP) - Please use CSP Builder

File access

No access to directories without default document?

Block access to hidden files and directories (e.g. .git) except `/.well-known/` hidden directory.

Block access to files that can expose sensitive information?

Enable HTTP Strict Transport Security (HSTS)?

Reduce MIME type security risks?

Re-enable (XSS) filter

Service Side Technology information

Remove the `X-Powered-By` response header?

Show server software information?

Rewrite Engine

Enable Rewrites?

Enable follow Symlinks?

Enable SymLinksIfOwnerMatch

Rewrite Base

Allow rewrites to redirect with the appropriate schema automatically (http or https)?

Forcings

Force https?

Force www?

Custom rules

For more information on how to use RewriteRules see:

Pattern (Tip: use REGEXR)

Substitution

Flags

Block bad robots

Block bad robots?

Bad Bots & Scrapers

Vulnerability Scanners

Aggressive Chinese Search Engine

Aggressive Russian Search Engine