Live salts from WordPress.org. Paste into wp-config.php. Rotating them logs everyone out.
WordPress Salt Generator
100% FreeFresh AUTH_KEY / AUTH_SALT defines from WordPress.org. Never cached.
Fresh keys from WordPress.org. Never cached. Pasting new salts into wp-config.php logs everyone out. This does not edit your server.
No keys yet
Generate when you are ready to paste into wp-config.php.
Embed This Tool
Easy to EmbedAdd WordPress Salt Generator to your website or blog in seconds.
- Responsive design
- Lightweight & fast
- No backend required
- Always up-to-date
<iframe
src="https://tools.town/embed/wordpress-salt-generator/"
width="100%"
height="600"
style="border:none; border-radius:12px;"
loading="lazy"
title="WordPress Salt Generator">
</iframe> Advertisement
How to Use
- 1 Generate
- 2 Copy into wp-config.php
- 3 Know that all users will be logged out
Features
- secret-key/1.1/salt/
- Never cached
- Does not write your server
Why it Matters
After a hack you rotate keys. Stale blog gists are worse than a live wp.org pull.
Frequently Asked Questions
Do you store the keys?
Will this fix malware?
Want to understand the math?
How the WordPress Salt Generator Works
Live AUTH_KEY and salt defines from WordPress.org, never cached. Rotating them logs everyone out — it does not clean malware.
24 Aug 2026
5 min read
Rotate wp-config.php Salts After a Hack
Generate live WordPress.org keys, paste the eight defines, expect a full logout, then lock down wp-config.php permissions.
24 Aug 2026
5 min read
WordPress.org Ops — Plugin Intel, Core Version, PHP & Salts
Tools.town cluster for public WordPress.org jobs: plugin health and activity, 30-day downloads, core version, PHP serve-happy, and live wp-config salts. No site scanning.
24 Aug 2026
5 min read
Related Tools You Might Like
WordPress PHP Version Checker
Ask WordPress.org serve-happy whether a PHP version is acceptable for current WordPress.
WordPress Version Checker
Current WordPress.org core offer and optional compare to the version you run.
Chmod Calculator
Toggle rwx for owner/group/other — get octal and symbolic chmod modes.
Is My WordPress Outdated?
Compare your WordPress version to the current WordPress.org offer.
Is This WordPress Plugin Abandoned?
Traffic-light activity from last updated + install bucket. Never states abandonment as fact.