HTPasswd window with Shield module


PHP Authentication shield. It creates a simple shield for the site with Apache authentication. It hides the sites, if the user does not know a simple username/password. It handles Drupal as a "walled garden".
This module helps you to protect your (dev) site with HTTP authentication.


If you don't need the authentication just leave the user field blank.

  1. enable the module
  2. go to the admin interface (admin/config/system/shield) and fill the form
  3. nothing else :)

On plain old CGI

Since Drupal 7.23 you don't need any .htaccess modification for CGI (#670454: Support HTTP Authorization in CGI environment) but if you use plain old CGI you still need a modification:
Modify .htaccess, inside <IfModule mod_rewrite.c>. Add the following line at the beginning of the section:

  RewriteRule .* - [E=REMOTE_USER:%{HTTP:Authorization}]


The original idea of the project came from chx. He also added tips for improvements. I'd like to thank the help and ideas of boombatower.

2012-04-26: Announcement: kalman.hosszu became a co-mainter of the module. He merges the features of his HTPasswd protection module into the Shield. Thank you very much Kálmán!

The 8.x branch is maintained by chx. We are looking for maintainers for 7.x.

Note: If you want to use it only on a dev site, and not in the production site, I suggest you to consider using the Environment modules and reading issue #1394326.

Project information

  • caution Seeking co-maintainer(s)
    Maintainers are looking for help reviewing issues.
  • caution Maintenance fixes only
    Considered feature-complete by its maintainers.
  • chart icon13,313 sites report using this module
  • shieldStable releases for this project are covered by the security advisory policy.
    Look for the shield icon below.