i have created 1 htpasswd outside the public_html directory and placed this htpasswd
in a folder called in this htpasswd file i have mentioned username and password

i have .htaccess file in a folder called folder1 inside public_html directory that i want to password protect when someone accesses folder1 and a username and password prompt appears this is working fine

my question is if i want to similarly protect another folder inside public_html called folder2 and in the htpasswd that i already have if i add another username and password and if i have another .htaccess password inside folder2 that i want to protect how does apache know that for folder2 it should check the 2nd username and password i have mentioned in htpasswd file

or does apache look at all the usernames and passwords in htpasswd and when the username and password are correct apache gives access to the folders

is this how it works or do i have to create another htpasswd file for protecting folder2

in .htaccess inside folder1 the code is

AuthUserFile /home/username/.htpasswds/.htpasswd
AuthType Basic
AuthName "folder1"
Require valid-user


in .htaccess inside folder2 the code is

AuthUserFile /home/username/.htpasswds/.htpasswd
AuthType Basic
AuthName "folder2"
Require valid-user

Apache looks first in the directory in which an asset lives, then up each directory level, for .htaccess files. Several .htaccess files can reference the same password file but you need to think through the user experience if you do this, or indeed the alternative of two different files. Access to folder2 would, in the latter case, cause the authentication popup for folder2 to be presented, followed if not already done in session by authentication for higher level - you'll have some confused and irritated visitors.

so i were to create another .htpasswd file where should i place it currently i have .htpasswds folder in /home/username/.htpasswds

should i create a directory here ex folder2 and in the .htaccess inside folder2 should i write

AuthUserFile /home/username/.htpasswds/folder2/.htpasswd
AuthType Basic
AuthName "folder2"
Require valid-user

Originally Posted by sudhakararaog

so i were to create another .htpasswd file where should i place it currently i have .htpasswds folder in /home/username/.htpasswds

should i create a directory here ex folder2 and in the .htaccess inside folder2 should i write

AuthUserFile /home/username/.htpasswds/folder2/.htpasswd
AuthType Basic
AuthName "folder2"
Require valid-user

The .htpasswd files can be anywhere as long as the path in .htaccess is correct. Having separate files is the better of the two solutions, yes..