diff --git a/Dockerfile b/Dockerfile
index 1439588..f24f52b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -120,6 +120,7 @@ RUN apk add --no-cache \
 		heimdal-libs \
 		libcap \
 		libltdl \
+		apache2-utils \
 		tzdata
 
 COPY --from=build /etc/squid/ /etc/squid/
diff --git a/README.md b/README.md
index 8d668c7..944910d 100644
--- a/README.md
+++ b/README.md
@@ -32,6 +32,8 @@ docker-compose up
 
 By default, the image now includes a local network allow-list (`/etc/squid/conf.d/localnet.conf`) so clients from RFC1918/RFC4193 ranges can connect without mounting an extra ACL file.
 
+The image also includes `apache2-utils`, so you can generate and manage `htpasswd` files directly in the container for basic authentication setups.
+
 
 ## Environment variables: