{"id":9680,"date":"2024-09-09T14:20:05","date_gmt":"2024-09-09T14:20:05","guid":{"rendered":"https:\/\/wpx.net\/kb\/?post_type=ht_kb&p=9680"},"modified":"2025-07-18T10:38:24","modified_gmt":"2025-07-18T10:38:24","slug":"wordpress-salts-and-how-can-i-use-them","status":"publish","type":"ht_kb","link":"https:\/\/wpx.net\/kb\/wordpress-salts-and-how-can-i-use-them\/","title":{"rendered":"WordPress Salts and How Can I Use Them?"},"content":{"rendered":"\n

WordPress salts are a set of eight unique cryptographic keys that play a key role in securing your site. They include four authentication keys<\/strong> (AUTH_KEY<\/code>, SECURE_AUTH_KEY<\/code>, LOGGED_IN_KEY<\/code>, NONCE_KEY<\/code>) and four salts<\/strong> (*_SALT<\/code>). These keys and salts help encrypt sensitive data like passwords and cookies, making it much harder for hackers to hijack sessions or steal credentials<\/p>\n\n\n\n

Why They Matter<\/strong><\/h2>\n\n\n\n

WordPress Salts add an extra layer of security during the encryption process, combining with your password to produce a hashed value. This means even if someone obtains your database dump or cookie, they can’t easily decrypt or reuse the data. They also ensure that cookies and other authentication mechanisms can\u2019t be tampered with or forged.<\/p>\n\n\n\n

Things to know about WordPress Salts<\/h2>\n\n\n\n

In simpler words, if you use any password, strong or weak, it will be left in the open to copy and breach, if not encrypted properly and stored for convenience and automatic login sessions through your device and browser.<\/p>\n\n\n\n

That is where the WordPress Salts come in handy and deliver the needed security and customer experience for your WordPress website.<\/p>\n\n\n\n

WordPress uses one part as Security Keys to encrypt the password and login information for each of your websites, specifically, then uses WordPress Salts Keys to synchronize them and further save browser cookies to store the information and log you in the WP Dashboard.<\/p>\n\n\n\n

It is essential not only to keep your password and login information safe but also to use a strong combination of letters and digits with an underscore to minimize any unwanted entries through weak and likely guessable ones.<\/p>\n\n\n\n

Where can I find my WordPress Salts?<\/h2>\n\n\n\n

When you install WordPress (including via WPX), these keys are automatically added to your wp-config.php<\/code> file, located in your site\u2019s root directory. To find them, follow the steps below.<\/p>\n\n\n\n

Step 1. Log in to your WPX account<\/h2>\n\n\n\n

Begin by logging into your WPX account. You can do this by visiting the WPX login page<\/a>.\u200b<\/strong><\/p>\n\n\n\n

Step 2. Go to Control Panel<\/h2>\n\n\n\n

Once logged in:<\/p>\n\n\n\n

    \n
  1. Locate your hosting plan in the WPX client area.<\/li>\n\n\n\n
  2. Click the Control Panel<\/strong> button next to the plan you wish to manage.<\/li>\n<\/ol>\n\n\n\n
    \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n

    If you have more than five hosting plans of the same type (WordPress, Agency or WooCommerce), not all may appear on the homepage. Use the WordPress Hosting<\/strong>, Agency Hosting<\/strong> or WooCommerce Hosting<\/strong> tab in the left-hand menu to find your service.<\/p>\n\n\n\n

    Step 3. FTP Users & Files <\/h2>\n\n\n\n

    In the Control Panel:<\/p>\n\n\n\n

      \n
    1. Select FTP Users & Files <\/strong><\/li>\n\n\n\n
    2. After that, click the File Manager<\/strong> button to open it. <\/li>\n<\/ol>\n\n\n\n
      \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n

      Step 4. Open wp-config.php<\/h2>\n\n\n\n

      From there: <\/p>\n\n\n\n

        \n
      1. Open the public_html<\/strong> folder of the site you want to check<\/li>\n\n\n\n
      2. Double click the wp-config.php<\/strong> to open the editor mode.<\/li>\n<\/ol>\n\n\n\n
        \"\"\n\t\t\t\n\t\t\t\t\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n

        WordPress Salts are encrypted and divided into two parts: <\/p>\n\n\n\n