WordPress hash & salt toolkit

WordPress password hash & salt key generator.

Free online tools to generate a WordPress password hash, a bcrypt hash for WP 6.8+, and fresh secret keys and salts for wp-config.php — or verify a hash straight from wp_users. Runs in your browser, no signup.

phpass→
Password hash Portable phpass hash for the wp_users.user_pass column.
$2y$→
bcrypt hash Modern bcrypt hash for WordPress 6.8 and newer.
wp-config.php→
Secret keys & salts Eight fresh keys and salts, ready to paste.
match?→
Hash verifier Check a password against an existing hash.
← all tools

Password hash

Portable phpass hash (MD5-based, WordPress's default 8-round work factor) for the user_pass column in wp_users.

A fresh random password is generated on load — type your own and hit Generate to hash that instead.

Hash output

phpass hashes start with $P$B. WordPress verifies them automatically on the next login.

← all tools

bcrypt hash

Modern bcrypt hash — the algorithm WordPress 6.8+ uses in wp_hash_password().

Hash output

bcrypt hashes start with $2y$. Higher cost = slower, harder to brute-force.

← all tools

Secret keys & salts

Eight fresh keys, formatted for wp-config.php. Paste over the existing block.


    

    
Regenerating and re-saving wp-config.php invalidates all sessions — everyone gets logged out.

  


  
  

    ← all tools
    
Hash verifier

    
Paste a hash from wp_users.user_pass and a candidate password to confirm whether they match. Works with phpass and bcrypt.