---
title: "WordPress Salt Generator – pwgen.de"
description: "All eight security keys and salts for wp-config.php, generated in your browser."
canonical_url: "https://pwgen.de/en/wordpress-salt-generator"
meta:
  "og:description": "All eight security keys and salts for wp-config.php, generated in your browser."
  "og:image": "https://pwgen.de/_og/s/o_65649bb015c938d3.png"
  "og:image:height": "630"
  "og:image:type": image/png
  "og:image:width": "1200"
  "og:title": "WordPress Salt Generator – pwgen.de"
  "twitter:image": "https://pwgen.de/_og/s/o_65649bb015c938d3.png"
---

> Index of every page on this site: [llms.txt](https://pwgen.de/llms.txt)

# **WordPress Salt Generator**

All eight security keys and salts for wp-config.php, generated in your browser.

Very strong**0 bits**Generated in your browser

## **Local alternative**

`wp config shuffle-salts`

Prefer generating secrets on the machine that uses them? This command produces an equivalent value.

[Official documentation](https://developer.wordpress.org/apis/wp-config-php/#security-keys)

WordPress secures login cookies and nonces with these values. The eight constants replace the placeholders or the previous values in wp-config.php, and every value is 64 characters drawn from the same alphabet WordPress itself uses. It deliberately contains no apostrophe and no backslash, so the single-quoted PHP strings cannot break. New salts sign out every logged-in user but leave content and passwords untouched.

## **Frequently asked questions**

Into wp-config.php, replacing the eight existing define lines for the keys and salts. Replace the whole section — the placeholders from a default installation offer no protection at all.

WordPress derives cookie and nonce hashes from these constants separately. Reusing one value across them defeats exactly that separation, which is why every line gets its own secret.

All signed-in users are logged out, because the existing authentication cookies no longer validate. Content, settings and passwords are unaffected.

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://pwgen.de/en#website","@type":"WebSite","description":"Kostenloser, datenschutzfreundlicher Passwort-Generator. Generierung direkt im Browser – keine Passwörter werden gespeichert.","inLanguage":"en-US","name":"pwgen.de","url":"https://pwgen.de/en","publisher":{"@id":"https://pwgen.de/#identity"},"translationOfWork":{"@id":"https://pwgen.de/#website"}},{"@id":"https://pwgen.de/en/wordpress-salt-generator#webpage","description":"All eight security keys and salts for wp-config.php, generated in your browser.","name":"WordPress Salt Generator","url":"https://pwgen.de/en/wordpress-salt-generator","@type":["WebPage","FAQPage"],"breadcrumb":{"@id":"https://pwgen.de/en/wordpress-salt-generator#breadcrumb"},"isPartOf":{"@id":"https://pwgen.de/en#website"},"mainEntity":[{"@id":"https://pwgen.de/en/wordpress-salt-generator#/schema/question/1"},{"@id":"https://pwgen.de/en/wordpress-salt-generator#/schema/question/2"},{"@id":"https://pwgen.de/en/wordpress-salt-generator#/schema/question/3"}],"potentialAction":[{"@type":"ReadAction","target":["https://pwgen.de/en/wordpress-salt-generator"]}],"primaryImageOfPage":{"@id":"https://pwgen.de/#logo"}},{"@id":"https://pwgen.de/#identity","@type":"Organization","email":"info@htrs.io","legalName":"GbR HTRS i/o","name":"HTRS i/o","telephone":"+49 221 292 513 03","url":"https://pwgen.de","vatID":"DE359532582","address":{"@type":"PostalAddress","streetAddress":"Gotenring 9","addressLocality":"Köln","postalCode":"50679","addressCountry":"DE"},"logo":{"@id":"https://pwgen.de/#logo"},"sameAs":["https://htrs.io"]},{"@id":"https://pwgen.de/en/wordpress-salt-generator#/schema/software-application/1","@type":"SoftwareApplication","applicationCategory":"DeveloperApplication","name":"pwgen.de – WordPress Salt Generator","operatingSystem":"Web Browser","offers":{"@type":"Offer","availability":"https://schema.org/InStock","price":"0","priceCurrency":"EUR","priceValidUntil":"2027-12-30T00:00:00.000Z"}},{"@id":"https://pwgen.de/en/wordpress-salt-generator#breadcrumb","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","name":"pwgen.de","item":"https://pwgen.de/en","position":1},{"@type":"ListItem","name":"Secrets","item":"https://pwgen.de/en/secrets","position":2},{"@type":"ListItem","name":"WordPress Salt Generator","position":3}]},{"@id":"https://pwgen.de/en/wordpress-salt-generator#/schema/question/1","@type":"Question","inLanguage":"en","name":"Where does the generated block go?","acceptedAnswer":{"@type":"Answer","text":"Into wp-config.php, replacing the eight existing define lines for the keys and salts. Replace the whole section — the placeholders from a default installation offer no protection at all."}},{"@id":"https://pwgen.de/en/wordpress-salt-generator#/schema/question/2","@type":"Question","inLanguage":"en","name":"Why eight different values?","acceptedAnswer":{"@type":"Answer","text":"WordPress derives cookie and nonce hashes from these constants separately. Reusing one value across them defeats exactly that separation, which is why every line gets its own secret."}},{"@id":"https://pwgen.de/en/wordpress-salt-generator#/schema/question/3","@type":"Question","inLanguage":"en","name":"What happens after replacing them?","acceptedAnswer":{"@type":"Answer","text":"All signed-in users are logged out, because the existing authentication cookies no longer validate. Content, settings and passwords are unaffected."}},{"@id":"https://pwgen.de/#logo","@type":"ImageObject","caption":"HTRS i/o","contentUrl":"https://pwgen.de/apple-touch-icon.png","inLanguage":"en","url":"https://pwgen.de/apple-touch-icon.png"}]}
```

## Sitemap

See the full [sitemap](https://pwgen.de/sitemap.md) for all pages.