Take the 2-minute tour ×  I'm setting up Trac, and want to
password protect the login page, as suggested here. I'm on a
shared hosting setup, so I can't modify the httpd.conf, I have
to use .htacces. How do I restrict just the login page without
restricting other pages? The Trac docs suggest:  <Location
"/trac/login">   AuthType Basic   AuthName "Trac"   AuthUserFile
/somewhere/trac.htpasswd   Require valid-user  But the Location
tag is only for httpd.conf, it doesn't work in .htaccess. How
can I get the same effect? There's no "login" directory to put a
.htaccess file into, it needs to go into the main trac
directory.  share|improve this question  2 Answers 2  This is
just a guess, but can you place that in a .htaccess file, minus
the <Location> and </Location> tags, inside the /trac/login
directory?  Also, be sure to have your htpasswd file outside the
document root (commonly public_html) otherwise it can be
downloaded and cracked.  share|improve this answer  It turns
out, dreamhost has a page on this very