How to Disable Apache Web Server Signature

On Debian, Ubuntu or Linux Mint:

sudo vi /etc/apache2/apache2.conf

On CentOS, Fedora, RHEL or Arch Linux:

sudo vi /etc/httpd/conf/httpd.conf

Add the following two lines at the end of Apache config file.

ServerSignature Off

ServerTokens Prod

Then restart web server to activate the change:

sudo service apache2 restart (Debian, Ubuntu or Linux Mint)

sudo service httpd restart (CentOS/RHEL 6)

sudo systemctl restart httpd.service (Fedora, CentOS/RHEL 7, Arch Linux)

(see image from source url)

ps: ServerTokens can be set to:

Prod (Server: Apache)
Min (Server: Apache/1.3.0)
OS (Server: Apache/1.3.0 (Unix))

Full (Apache/1.3.0 (Unix) PHP/3.0 MyMod/1.2)

How to disable (apache’s) server signature

Published by


Ayutthaya Technical College/Voc.Cert.🛠️ | KMUTNB/B.S.Tech.Ed.⚙️ | Information Security Engineer 👨🏻‍💻| Penetration Tester👨🏻‍💻 | COYG🔴 Milan🔴⚫️ | Taylor Swift👩‍🎤 | ติ่งซีรีส์ญี่ปุ่น 🇯🇵

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.