Adicione as seguintes configuração SetEnvIf Request_URI ^/{nomedosite}.*$ noauth=1 Allow from env=noauth Satisfy any Troque o {nomedosite} para o caminho que espera vir na URL. Seu .htaccess ficaria assim para /home/meusite/app/webroot/.htaccess <IfModule mod_rewrite.c> AuthType Basic AuthName "Ambiente de Desenvolvimento Teste" AuthUserFile /home/user/.htpasswd Require valid-user SetEnvIf Request_URI ^/meusite.*$ noauth=1 Options Indexes FollowSymLinks MultiViews #AllowOverride All #Order Deny,Allow Satisfy any Deny from all Allow from env=noauth RewriteEngine On RewriteCond %{REQUEST_FILENAME} !-d RewriteCond %{REQUEST_FILENAME} !-f RewriteRule ^(.*)$ index.php?url=$1 [QSA,L] </IfModule> Fonte: http://stackoverflow.com/questions/8978080/htaccess-exclude-one-url-from-basic-auth