how do I retrieve a lost .htpasswd password?

Answer by: Andrew Hickl, Aplus.Net Knowledge Base Support

Unfortunately, there is no good way to retrieve a lost .htpasswd password, as there is no script available to “unencrypt” a password once it has been encrypted.

In the case of a lost or forgotten password, we recommend that you open the .htpasswd file (using an FTP client or the Aplus.Net Control Panel’s File Manager) and remove the line containing the user’s information. You can then re-add the user after encrypting their new password. This will allow you to update an individual user’s password information without compromising the security and access of your other users.

If you are using the “Protect Directories” function on the Aplus.Net Control Panel, you can remove an individual user from the .htpasswd file using the web-based interface. Here’s how:

Start by logging into the Aplus.Net Control Panel at http://cp.aplus.net using your Registration Number and Customer Password.
Select Web Hosting from the top navigation bar.
Next, select Hosted Domains and click on Manage Hosted Domains.
Click the Protect Directories icon.
Use the Manage existing Protected Directories drop-down menu to select the protected directory that you’d like to manage.
Select which user you’d like to remove and click the Remove User button.
You can re-add the user using the dialog found under Protect New Directory dialogue section.

The Aplus.Net encryption utility is available at: http://users.abac.com/cgi-bin/pass.pl

Important: If you have a Windows-based hosting plan, you cannot use .htaccess files.