.htaccess Generator Online — Create Apache Server Configuration

Automatically redirect visitors from one address to another. Essential for site migrations, domain changes, or enforcing a unified URL format.

• HTTP → HTTPS — redirect all visitors to the secure version of the site
• WWW → non-WWW — remove www from the address (example.com instead of www.example.com)
• non-WWW → WWW — add www to the address for a unified format
• 301 redirect — permanent redirect from an old page to a new one
• Redirect index.php — hide index.php from the URL

Rules to protect your site from attackers, bots, and unauthorized access. Enhance security and stability.

• Block IP addresses — deny access for specific IPs
• Protect wp-admin — restrict access to the WordPress admin panel
• Protect wp-config.php — deny access to the configuration file
• Disable directory listing — hide file lists in directories
• Hotlink protection — prevent other sites from using your images
• Block malicious bots — protect from unwanted scanners

Settings to speed up site loading through browser file caching and data compression before transfer.

• Browser Caching — save files in the browser for a set period
• Gzip compression — compress HTML, CSS, JS files for faster transfer
• Image caching — cache images in the browser for 1 month
• Style and script caching — cache CSS and JavaScript files
• ETag removal — optimize cache validation

Special server parameters: PHP settings, error pages, encoding, and other technical options for webmasters.

• Custom error pages — custom pages for 404, 403, 500 errors
• UTF-8 encoding — proper display of international characters
• PHP settings — increase memory limits and execution time
• Disable register_globals — improve PHP security
• Force download for files — force download of certain file types

Minimal set of rules for a simple informational website or landing page.

• HTTPS redirect for security
• WWW redirect for unified format
• Basic file caching
• Gzip compression for speed
• Custom 404 page

Extended rules for an e-commerce site with enhanced security and speed optimization.

• Forced HTTPS for the entire site
• Image hotlink protection
• Maximum caching of static files
• Suspicious User-Agent blocking
• Admin panel protection
• Gzip optimization for large files

Specialized rules for WordPress sites: blogs, news portals, corporate websites.

• wp-config.php and wp-admin protection
• Hide WordPress version
• Block XML-RPC attacks
• WordPress file caching
• Brute force protection for wp-login.php
• Clean URLs for WordPress without index.php

.htaccess (hypertext access) is a configuration file for the Apache web server. It allows you to configure site behavior without access to the main server config: create redirects, protect directories, optimize loading speed.

Upload the file to the root directory of your site (where index.php or index.html is located). This is usually the public_html, www, or httpdocs folder on your hosting. The file must be named exactly .htaccess (with a dot at the beginning).

.htaccess only works on the Apache web server. If your hosting uses Nginx, different configuration files are needed. Most shared hosting providers use Apache and support .htaccess.

If a 500 Internal Server Error appears after uploading .htaccess, delete or rename the file via FTP. Check that all rules are supported by your hosting. Add rules gradually, checking functionality after each addition.

The simplest way is to add a test redirect or access denial rule. If the rule takes effect, .htaccess is working. You can also add an intentional error to the file — if a 500 error appears, the file is being processed by the server.

Yes, you can combine an unlimited number of rules in a single .htaccess. Use our generator to select all the settings you need at once — they will automatically be merged into one file in the correct order.