diff --git a/home-manager/common.nix b/home-manager/common.nix
index e374545..0745330 100644
--- a/home-manager/common.nix
+++ b/home-manager/common.nix
@@ -117,6 +117,15 @@ in
           ${pkgs.awscli2}/bin/aws s3 cp --acl "public-read" --expires "$(${pkgs.coreutils}/bin/date '+%a, %d %b %Y 00:00:00 GMT' -d "$(${pkgs.coreutils}/bin/date +%Y-%m-%d) + 365 day")" --cache-control "max-age=31536000" --metadata-directive REPLACE
         '';
 
+        bcrypt = lib.mkDefault "${pkgs.writeShellScript "bcrypt" ''
+          if [[ -z "$1" ]]; then
+            echo "Usage: bcrypt <password> [cost]"
+            exit 1
+          fi
+
+          echo -n "$1" | ${pkgs.apacheHttpd}/bin/htpasswd -i -nB -C ''${2:-12} "" | tr -d ':'
+        ''}";
+
         cat = lib.mkDefault "${pkgs.bat}/bin/bat --paging=never";
 
         # use curl-aws --aws-sigv4 "aws:amz:region:service"