WordPress Salt Generator
All eight security keys and salts for wp-config.php, generated in your browser.
Very strong0 bitsGenerated in your browser
Local alternative
wp config shuffle-saltsPrefer generating secrets on the machine that uses them? This command produces an equivalent value.
Official documentationWordPress secures login cookies and nonces with these values. The eight constants replace the placeholders or the previous values in wp-config.php, and every value is 64 characters drawn from the same alphabet WordPress itself uses. It deliberately contains no apostrophe and no backslash, so the single-quoted PHP strings cannot break. New salts sign out every logged-in user but leave content and passwords untouched.
Frequently asked questions
Into wp-config.php, replacing the eight existing define lines for the keys and salts. Replace the whole section — the placeholders from a default installation offer no protection at all.
WordPress derives cookie and nonce hashes from these constants separately. Reusing one value across them defeats exactly that separation, which is why every line gets its own secret.
All signed-in users are logged out, because the existing authentication cookies no longer validate. Content, settings and passwords are unaffected.