Enter a username and password, choose bcrypt or SHA-1, and the tool computes a real password hash formatted as an .htpasswd entry for Apache or nginx basic auth.
It's a real hash — bcrypt or SHA-1 is computed from the password you enter in your browser, so the .htpasswd line is ready to use immediately.
Yes, as a starting point — double-check paths, URLs, and directives against your actual domain before deploying.
No. Everything is built client-side in your browser from the values you enter.