Open-source WordPress security tools
WordPress password hash and security key tools.
Generate legacy phpass hashes, WordPress 6.8+ $wp$2y$ password hashes, and fresh wp-config.php keys. Each tool runs locally in your browser.
$P$ hash for older WordPress installations.
$wp$2y$ · 6.8+
Modern password hash
Generate the current WordPress Core password format.
wp-config.php
Secret keys and salts
Create all eight authentication keys ready to paste.
$wp$2y$ · $P$ · MD5
Hash verifier
Check a candidate password against a WordPress hash.
Designed for sensitive values
WPSalt is a static, open-source tool. Passwords and generated secrets are processed in your browser and are never sent to WPSalt. See the methodology and privacy details before using it with production systems.