diff --git a/scripts/bcrypt b/scripts/bcrypt
new file mode 100755
index 0000000..1a4f843
--- /dev/null
+++ b/scripts/bcrypt
@@ -0,0 +1,17 @@
+#!/bin/sh
+
+set -euo pipefail
+
+if [ "$#" = 0 ]; then
+    echo "Usage: $0 [passwords...] | $0 - < passwords.txt" >&2
+    exit 1
+fi
+
+if [ "$1" = '-' ]; then
+    xargs -x -n1 -d'\n' htpasswd -bnBC 10 "" | tr -d ':' | sed '/^$/d'
+else
+    for pass in "$@"; do
+        htpasswd -bnBC 10 "" "$pass" | tr -d ':' | sed '/^$/d'
+    done
+fi
+
diff --git a/scripts/default.nix b/scripts/default.nix
index 13c19c0..a9493b2 100644
--- a/scripts/default.nix
+++ b/scripts/default.nix
@@ -54,6 +54,7 @@
       _diffr
     ];
     helix-man-pager = [ helix-pager ];
+    bcrypt = [ apacheHttpd ];
     musmenu = [
       mpc-cli
       wdmenu
diff --git a/user/home.nix b/user/home.nix
index d455a28..6dc84f5 100644
--- a/user/home.nix
+++ b/user/home.nix
@@ -79,6 +79,7 @@
     micro
     _diffr
     br # bulk rename
+    bcrypt
 
     comma