An .htaccess file controls Apache server behavior for a specific directory — redirects, caching, compression, error pages, and security. Use our free .htaccess Generator to build rules with live preview and download. Part of our Complete Developer Tools Guide.
What Is .htaccess?
A plain-text configuration file placed in your website's document root (or any subdirectory). Apache reads it on every request to that directory. It controls redirects, caching headers, compression, custom error pages, IP blocking, and file protection — without needing server admin access.
HTTPS Redirect with .htaccess
The single most important rule in 2026 — force all HTTP traffic to HTTPS with a permanent 301 redirect. This protects user data, improves SEO, and is required for modern browser features. Our generator creates the correct RewriteRule syntax automatically.
WWW vs Non-WWW
Choose one canonical URL format and redirect the other. Google treats www and non-www as separate sites if both are accessible. Pick based on branding preference — there is no SEO advantage to either, but consistency matters.
Browser Caching — mod_expires
Set cache expiry headers for static assets (images, CSS, JS) so repeat visitors load faster. Typical settings: images for 1 year, CSS/JS for 1 month. Requires Apache mod_expires module enabled.
GZIP Compression — mod_deflate
Compress HTML, CSS, JavaScript, and JSON before sending to the browser — typically reducing transfer size by 60–80%. Requires mod_deflate enabled on your server.
Security Rules
Block specific IP addresses, disable directory listing (Options -Indexes), and protect sensitive files like .env and config.php from direct web access. These are basic but essential security measures for any Apache-hosted site.
When .htaccess Won't Work
Nginx servers do not use .htaccess. If your hosting runs Nginx (common on Vercel, Netlify, and many cloud providers), you need server-block configuration instead. Always check with your host which web server they use before deploying .htaccess rules.
Frequently Asked Questions
What is an .htaccess file?
An .htaccess file is a directory-level configuration file used on Apache web servers. It lets you configure URL redirects, browser caching, GZIP compression, custom error pages, and access controls for a specific directory, without needing to modify the main server configuration.
Does .htaccess work on Nginx?
No — .htaccess is specific to Apache servers. Nginx uses server-block configuration files instead. If your hosting uses Nginx (common on modern cloud hosting), .htaccess rules will be ignored. Check with your host which web server they use.
How do I redirect HTTP to HTTPS using .htaccess?
Add these lines to your .htaccess file: "RewriteEngine On / RewriteCond %{HTTPS} off / RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]". This permanently redirects all HTTP requests to HTTPS using a 301 redirect.
Will incorrect .htaccess rules break my site?
Yes — a syntax error in .htaccess can cause a 500 Internal Server Error for your entire site or directory. Always back up your existing .htaccess before making changes, and test changes on a staging environment first. Most errors come from incorrect RewriteRule syntax or unclosed tags.