WordPress Salt Generator
Generate authentication keys and salts for a WordPress wp-config.php.
What are WordPress salts?
WordPress uses secret keys to encrypt the information it stores in user cookies. They add a layer of randomness to the password hashing, which makes a stolen cookie or database far harder to turn into a working login.
Keys included
AUTH_KEYSECURE_AUTH_KEYLOGGED_IN_KEYNONCE_KEYAUTH_SALTSECURE_AUTH_SALTLOGGED_IN_SALTNONCE_SALTWP_CACHE_KEY_SALT
Important
- Generate a fresh set for every WordPress installation.
- Treat them like passwords — never commit them or share them in plain text.
- Changing them invalidates every session and logs all users out.
- Keep a backup somewhere secure before you replace the old values.
Generated configuration
Press “Generate new salts” to create your WordPress configuration keys
How to use
- Hit Copy all to take the whole block.
- Open the site’s
wp-config.php. - Find the existing keys and salts section.
- Replace those lines with the generated ones.
- Save and upload. Everyone signed in will be logged out.
9
Total keys
64
Characters each
from a 91-character pool
About
WP_CACHE_KEY_SALT — object caches such as Redis and Memcached prefix their keys with it, so cached data stays unique to this installation. Without it, two WordPress sites sharing one cache server can collide and serve each other’s data. It is not part of core’s default block, but add it and any caching plugin will pick it up.Generated in your browser using
crypto.getRandomValues() — the salts are never sent to the server, logged, or stored anywhere. Close the tab and they are gone, so paste them into wp-config.php before you navigate away.