The Unix permissions of Apache's htpasswd file should be configured appropriately. (1) permissions (1) via chmod 1.19 Updating Ownership and Permissions p34 Security Configuration Benchmark For Apache Web Server CIS 2008-11-01 Version 2.2.0 Prose (PDF)