Posted by: Yorgo Nestoridis
Category: WordPress, WordPress Security Keys, WordPress Tutorial, WordPress Tutorials
Tags: dublicator, Yorgo Nestoridis, yorgoo
WordPress Security Keys
Improve WordPress Security with Salt
Contents
How to improve security on WordPress and what are Security Keys? If your website has ever been hacked, you probably have changed passwords and access names, but have you ever thought of changing your WP Security keys?
Where are the WordPress Security Keys?
Without going into technicalities, just know, that WP comes with security keys. Defaults are loaded in the database. Additional keys can be edited in the wp-config.php file.
Add Salts to the wp-config.php file
By default the wp-config.php contains:
define('AUTH_KEY', 'put your unique phrase here');
define('SECURE_AUTH_KEY', 'put your unique phrase here');
define('LOGGED_IN_KEY', 'put your unique phrase here');
define('NONCE_KEY', 'put your unique phrase here');
When installing WP, the so-called Salts are often created automatically. If they are not there, you are invited to create your own unique pass phrases.
To keep it simple, you may use the automated key generator from WordPress, click HERE
When clicking on the above link you may get something like this (don’t use the below keys, get your own and keep them secret!):
define('AUTH_KEY', ',Z9!M|Lccf;Y]]@gD{ G^.CI~koampO,Rc{Uev+E)nOdoB~E<+;J|svK=}/!i4}J');
define('SECURE_AUTH_KEY', 'V}jovPJ6BXCD0C (.t[wf7-h^MSO.tCTE`|1jVw^J#^%~3@ZuoWHfCy[+zpFogM#');
define('LOGGED_IN_KEY', 'JU+Nh5|hAz-J6&}Trgkg`vn-$cjPV3S3<^ZTk{<vD_|P^L>w+[=q5ovK*p450E9`');
define('NONCE_KEY', 'C!w3rs.=K^y2dx,YX]*-$z=hP+=WFa3cl?18VxF0?VD.dtR&R0xK*$&+IJ&QKB)J');
define('AUTH_SALT', '&Ry7_ueekL-DO0s*DBeCw7+NPZ6^AcGbTrre@]^6NjnFtWu$FMK{$UGkTxC<;71J');
define('SECURE_AUTH_SALT', '3bd~/> k1]kjOf|)Q^Mi%-36TOmSt>-Z$1QuF*<Z|1NfY3Yz[W1/;H/yvL~0sz0V');
define('LOGGED_IN_SALT', '+&%:*T^5FN5[j6A9?Oq25QoE?sI<6u)(GAa4>8`o#jt3Yd0m}xg@iBA}+;.lb|*U');
define('NONCE_SALT', 'fr28HY1.]Jb3;L{{RmUj{j_}6r]p0[M<d8|+[}$%j#?cGJcC vMX-|;Loph.-bLV');
Replace the above defaults or your existing keys with the new keys from the generator (change a few digits if you really are paranoiac). Just overwrite the existing lines in your wp-config.php and save to server.
Change these keys once in a while, namely after a hack.
If you need further help, please comment below or contact me through support.
