Open-source WordPress security tools
WordPress password hash and security key tools.
Salts, hashes and .htaccess rules for wp-config.php and the users table. Nothing you type or generate leaves this page — pick a tool, or press its number.
define() lines for wp-config.php.
02 · Hash
Modern password hash
bcrypt $wp$2y$ for WordPress 6.8 and later.
03 · Hash
Legacy password hash
phpass $P$ for WordPress 6.7 and earlier.
04 · Server
htaccess rules
Standard WordPress rewrite block plus Apache hardening.
05 · Check
Hash verifier
Check a candidate password against an existing hash.
Built for sensitive values
WPSalt is a static, open-source tool. Passwords and generated secrets are processed in your browser and are never sent to WPSalt. See the methodology and privacy details before using it with production systems.