InYourHand

Build .htaccess security rules

Tick the rules you want to get the .htaccess text.

  • No registration, No login
  • Zero privacy leaks
  • No AI training
  • Free forever
  • Eco: no server processing: Processing happens only on your device. No data-center power or cooling water is used.

🤲Your files are yours. Keep them in your hand.

Options

Some items overlap with your host’s WAF or security settings (e.g. XServer). Use only one of them.

Back up your current .htaccess before pasting.

How to use .htaccess Security Generator

  1. Type the text or URL you want to turn into a QR code.
  2. Reorder or adjust the settings, then hit the big button.
  3. When it's ready, click "Save." Your files never leave your device.

FAQ

Where do I paste it?

Above "# BEGIN WordPress" in the site’s .htaccess. Back up the current file first.

Is it safe to block xmlrpc.php?

Mobile apps and some integrations stop working. Block it if you do not use them.

Is it safe to use .htaccess Security Generator with my files?

Yes. Your files are never uploaded — they're processed only inside your browser. Every page is served with a policy that blocks outgoing connections (Content-Security-Policy connect-src 'none'), and the counter in the bottom-left shows the data sent: 0 bytes.

Is it free? Do I need an account?

It's completely free, no account needed, and there are no usage limits.

Does it work on my phone?

Yes. It works in mobile browsers on iPhone and Android. For very large files, a computer will be faster.

More tools

Data sent to server: 0 bytes