WPSalt field notes
WordPress security, made understandable.
Useful, source-backed guides for the moments when you need to recover an account, understand a hash, or rotate your site’s secrets.
Start here
Choose the task in front of you.
Each guide is concise, tied to WordPress Core documentation, and links directly to the relevant local tool.
01
Compatibility
Understand a WordPress password hash
Learn how
$wp$2y$, $P$, bcrypt, and MD5 relate to WordPress versions.
Read the guide
02
Account recovery
Reset an authorized account safely
Start with safer recovery options, then use phpMyAdmin only when it is truly needed.
Read the guide
03
Site security
Rotate WordPress keys and salts
Know what belongs in wp-config.php, when to replace it, and what changes afterward.
Read the guide
Recovery and maintenance
Solve the blocker, not just the symptom.
These guides cover the checks that make account recovery safer and help prevent repeat lockouts.
04
Command line
Reset a password with WP-CLI
Use WordPress’s own user update flow without exposing a password in shell history.
Read the guide
05
Database navigation
Find the correct WordPress users table
Understand prefixes, multisite names, and the fields that confirm you are in the right place.
Read the guide
06
Troubleshooting
Fix a password reset that is not working
Separate email, link, database, and login-plugin failures before making another change.
Read the guide