.htaccess Pro Wizard

Basic settings

Step 1 of 9

Choose the target server and core directory behaviour. The preview updates immediately.

Server target

File name

Directory index order

Disable directory listingGenerates Options -Indexes. Follow symbolic linksMay be restricted by shared hosting. Disable MultiViewsAvoids content-negotiation routing conflicts. Block TRACE requestsUses a rewrite rule valid in distributed configuration.

Protect hidden files, backups and common secrets. Security directives are wrapped for Apache 2.4-compatible servers.

Protect .htaccess and .htpasswdBlocks direct web access. Protect hidden filesAllows .well-known for certificates. Protect backups and logsBlocks common backup/source extensions. Security headersAdds safe baseline response headers. Restrict uncommon methodsAllows GET, POST, HEAD and OPTIONS. Image hotlink protectionRequires allowed hostnames below.

Blocked IP addresses or CIDR ranges

Additional protected filename patterns

Regex alternatives separated with |.

Configure canonical redirects, a front controller and optional custom rewrite rules.

Force HTTPSPreserves host, path and query string. Force www hostnameUse only if DNS and TLS cover www. Remove www hostnameMutually exclusive with Force www.

Canonical hostname

Recommended when forcing or removing www; avoids unsafe Host-header reflection.

Redirect status

Front controller

Simple redirects, one per line

Each line is source then destination. The chosen redirect status is used.

Custom rewrite directives

Assign branded local error documents or external URLs.

400 Bad Request

401 Unauthorized

403 Forbidden

404 Not Found

500 Server Error

503 Unavailable

Enable compression and browser caching with module guards for compatibility.

Text compressionUses mod_deflate. Expires cachingSeparate HTML, asset and image lifetimes. Disable ETagsUseful on some multi-server deployments. Immutable hashed assetsAdds long cache headers for hashed files.

HTML lifetime

CSS/JS lifetime

Image/font lifetime

Set non-secret runtime values. Avoid placing production passwords or API keys in a web-server configuration file.

Explicitly protect .env filesRecommended even when hidden files are already blocked.

SetEnv variables, KEY=value

Advanced SetEnv / SetEnvIf directives

Secret-like names are flagged by the validator and local persistence can be disabled in Editor settings.

Protect the current directory with server-managed Basic or Digest authentication.

Enable HTTP authenticationRequires an existing password file outside the public web root.

Authentication type

Realm name

Absolute password-file path

Require rule

Add MIME declarations, response headers and directives not represented elsewhere.

MIME declarations

Additional Header directives

Custom directives

Review the generated file, validate it and send it to the full editor for final changes.

0lines

0 Bfile size

0warnings

0errors

Live preview

Apache 2.4+0 lines · 0 B

Direct editor

.htaccess

File name

PrivacyAutosave draft locallyDisable on shared devices or for secret-bearing files.

Local file library

0 versions

Install .htaccess Pro

.htaccess Pro Wizard

Basic settings

Live preview

Direct editor

Local file library

Compare with current editor

Find and replace

Rename saved version

Installation help