WordPress uses eight secret keys and salts to encrypt the information stored in login cookies. Strong, unique keys make sessions much harder to hijack. Every set below is generated freshly in your browser, so the keys never travel across the internet.

Replace the placeholder keys in your wp-config.php file with the values below. Every set is generated freshly in your browser.

How to use it

Copy the eight lines shown above.
Open your wp-config.php file over SFTP or your host file manager.
Find the block from AUTH_KEY to NONCE_SALT and replace it with the copied lines, then save.

Changing your keys logs out every current user, which is exactly what you want after a suspected breach or after removing a risky plugin.

Frequently asked questions

Is it safe to generate keys here?

Yes. The keys are created in your browser using the built in cryptographic random function. Nothing is sent to any server.

Will changing the keys break my site?

No. It only ends active login sessions. Everyone will need to sign in again. Your content and settings are untouched.