Cryptographically random
Uses your browser's secure random generator, not a predictable pseudo-random one.
WordPress Salt & Security Key Generator
Generate fresh wp-config.php authentication keys and salts locally.
- Free
- No sign-up
- Runs in your browser
- WordPress
Loading tool…
Was this tool useful?
Why use it
WordPress uses eight keys and salts in wp-config.php to secure login cookies. Replace them after a security incident, when a developer leaves, or when you set up a new environment. These values are generated in your browser with crypto.getRandomValues and never leave your device.
Two formats
Copy define() lines for wp-config.php or KEY=value lines for an .env file.
Never transmitted
Keys are generated and shown only in your browser.
How to use it
4 quick steps. Going deeper? Read “There has been a critical error on this website”: a step-by-step WordPress fix.
- 01
Select Generate to create eight new 64-character values.
- 02
Copy the define() block, or the .env format for Bedrock-style setups.
- 03
Replace the existing AUTH_KEY…NONCE_SALT lines in wp-config.php.
- 04
Save the file. Every logged-in user, including you, will need to log in again.
Who it’s for
Typical situations where this tool saves time.
- Site owners after a hackReplace the keys to log every user out immediately.
- DevelopersGive each environment (local, staging, production) its own keys.
- Hosting teamsGenerate keys during provisioning without calling an external API.
Questions
Short answers about privacy, limits and how the tool works.
Is it safe to generate keys in a browser?
Yes. The tool uses the Web Crypto API's cryptographically secure random generator, and the keys are never transmitted. You can even use it offline once the page has loaded.
What happens when I change the keys?
All existing login cookies become invalid, so everyone is logged out. Content, passwords and settings are not affected.
How is this different from the WordPress.org API?
The official API generates keys on WordPress.org's server. This tool generates them locally, which some security policies require.
Need a tool like this inside your product?
I build custom calculators, admin utilities and integrations for WordPress, Laravel and Next.js teams.