Why Use SALT Keys in WordPress?

When you log in to WordPress, you have the option to remain logged in long-term. To achieve this, WordPress stores your login data in cookies instead of in a PHP session. Malicious individuals can hijack your cookies through various means, leaving your website vulnerable. To make it harder for attackers to use cookie data, you can take advantage of SALT keys. WordPress SALT keys encrypt your password, making it harder to guess. What’s more, it’s next to impossible for hackers to simply ‘unscramble’ the result in order to get at the original password.

What people says about Salt Shaker

Salt Shaker has received positive feedback from various sources:n- WPBeginnern- Kinstan- WPEnginen- Elgenat Themesn- Hostinger

Salt Shaker provides the following features:n- Improve your WordPress security.n- Easy to use, set it and forget it, with minimal settings.n- Manual and immediate WP security keys and salts changing.n- Set automated schedule for keys and salts change.

If you are a developer, you can contribute to Salt Shaker by forking the project on GitHub and submitting your contributions via pull request.

Life Time Extra Credits Offer Extended

Validity: Dec 05 - Dec 12, 2025

CODE: INSTA41

Salt Shaker

Salt Shaker enhances WordPress security by changing WordPress security keys and salts manually and automatically.

Rating:

4.7

Active Installations:

10000+

Last Updated:

Jan 27, 2025

WordPress Version:

4.0 or higher

Tested up to:

6.7.2

Features Download’s trend Changelog Reviews

Strengthen WordPress Security

Harden your WordPress security with Salt Shaker plugin, changing salt keys manually or automatically.

Protect Your Website

Use SALT keys in WordPress to encrypt your password and make it harder for attackers to guess or unscramble.

Trusted by Experts

WPBeginner, Kinsta, WPEngine, Elegant Themes, and Hostinger recommend Salt Shaker for securing WordPress sites.

Easy and Effective

Improve WordPress security with Salt Shaker's easy-to-use features, set it and forget it with minimal settings.

Author’s Site

1.4.8

Updated: Freemius SDK.

1.4.7

Fixed: a fatal error when a backslash appears at the end of generated keys.

1.4.6

WordPress 6.7 compatibility.
Generate salts locally if the API call fails.
Updated Freemius SDK.

1.4.5

WordPress 6.6 compatibility.
Show admin notices only on the plugin page.

1.4.4

WordPress 6.5 compatibility.

1.4.3

WordPress 6.4 compatibility.

1.4.2

Minor bug fixes.
Updated Freemius SDK.

1.4.1

Quick fix for the wp-salt file path.

1.4.0

WordPress 6.2 compatibility.
Support for wp-salt files.
Introducing Salt Shaker PRO.

1.3.2

WordPress 6.1 compatibility.

1.3.1

WordPress 6.0 compatibility.
Fix an issue with the AUTH_KEY and AUTH_SALT keys not being changed.

1.3.0

Tested with WordPress 5.9.

1.2.9

WordPress 5.8 compatibility.

1.2.8

WordPress 5.7 compatibility.

1.2.7

WordPress 5.5 compatibility.

1.2.6

WordPress 5.4 compatibility.
Replacing some functions with standard WP functions.

1.2.5

Enhanced internationalization.
WordPress 5.3 compatibility.

1.2.4

Keeping the original permissions of the config file.
Performance improvement

1.2.3

Changing the config permission to 0640
Added: filters for additional salts

1.2.2

Tested with WordPress 5.1.
Added: link to the settings page from the plugins page.
Added: redirect to the login page after the immediate change action.
Added: check if wp-config.php is writable. How the heck this was missing?!
Added: Filter to define a custom salts file. salt_shaker_salts_file

1.2.1

Tested with the upcoming WordPress 5.0
#11 – Added more interval times, quarterly and bianually.
Fixed an issue with wp-config being in outside the root directory.
Fixed a bug when updating the cron, now the old cron job is deleted.

1.2

Tested with the upcoming WordPress 4.9
#9 – Change salts if wp-config.php is moved one directory higher than the document root
Setting the right permission to wp-config.php after changing the salts according to Codex recommendations.

1.1.6

#8 – Change line endings to LF

1.1.5

Security improvements

1.1.4

Improvements:
** Ensure the user is administrator before processing AJAX requets
** Escape attributes using esc_attr_e

1.1.3

WordPress 4.8 Compatibility.

1.1.2

WordPress 4.7 Compatibility.

1.1.1

Edited Arabic translation file.

1.1

Few enhancements
Multilingual Ready

1.0

Initial Release

Salt Shaker

By muhammedhamed on May 30, 2024

good and valid

All Systems Go!

By shirtguy72 on May 18, 2023

Reviewed the changelog before installing, glad file permissions are now left alone, confirmed, all working as expected. Great plugin, thanks! 5-Stars!

Excellent addition to my security arsenal!

By now4dw on March 9, 2023

This is a simple, elegant and yet powerful addition to any security you might already have on your site/sites.

I have been the victim of cookie hijacking. It wasn't a pleasant experience!

This plugin ensures you and your team log out according to a fixed schedule resulting in a fresh cookie when you log back in. Indispensable!

Best Salt & Key Plugin

By gopalb123 on February 28, 2023

This plugin (Salt Shaker) is amazing, and every WP website needs it. Use this plugin to keep your website secure.<gwmw style="display:none;"></gwmw>

this is one the best plugins

By Tawfiq Makhamreh (tawfiq1616) on January 12, 2023

this is great plugin, each site should have it. you will not have it with other plugins, keep your site safe

Wonderfull

By saadezz on June 28, 2022

The plugin works fine

White screen

By Breinbrouwsels on September 14, 2021

This plugin left me with a white screen

Must have plugin for wp security.

By Md. Redwan Hossain (redwancou) on June 14, 2021

Great plugin.

Good work

By mouadhboukefa on April 7, 2021

Very useful and well built

One of the Best Plugins I Use

By donkiely on June 18, 2020

This is one of the best plugins I use on my sites. It is simple to use, does exactly what it is supposed to, and best of all boosts the security of my sites. The only thing that confuses me about it is, why don't way more sites use it??!!?

More Reviews

Try other plugins too!

Timthumb Vulnerability Scanner

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

Try Demo More Details

CloudGuard

Use Cloudflare's free geolocation service to restrict access to your site's login page.

Try Demo More Details

LWS Hide Login

Secure your access to the admin page with this plugin !

Try Demo More Details

Screenshots

Author Site

Salt Shaker

Strengthen WordPress Security

Harden your WordPress security with Salt Shaker plugin, changing salt keys manually or automatically.

Protect Your Website

Use SALT keys in WordPress to encrypt your password and make it harder for attackers to guess or unscramble.

Trusted by Experts

WPBeginner, Kinsta, WPEngine, Elegant Themes, and Hostinger recommend Salt Shaker for securing WordPress sites.

Easy and Effective

Improve WordPress security with Salt Shaker's easy-to-use features, set it and forget it with minimal settings.

1.4.8

1.4.7

1.4.6

1.4.5

1.4.4

1.4.3

1.4.2

1.4.1

1.4.0

1.3.2

1.3.1

1.3.0

1.2.9

1.2.8

1.2.7

1.2.6

1.2.5

1.2.4

1.2.3

1.2.2

1.2.1

1.2

1.1.6

1.1.5

1.1.4

1.1.3

1.1.2

1.1.1

1.1

1.0

Salt Shaker

All Systems Go!

Excellent addition to my security arsenal!

Best Salt & Key Plugin

this is one the best plugins

Wonderfull

White screen

Must have plugin for wp security.

Good work

One of the Best Plugins I Use

Try other plugins too!

Timthumb Vulnerability Scanner

Scans your wp-content directory for vulnerable instances of timthumb.php, and optionally upgrades them to a safe version.

CloudGuard

Use Cloudflare's free geolocation service to restrict access to your site's login page.

LWS Hide Login

Secure your access to the admin page with this plugin !

Screenshots

Try Salt Shaker With InstaWP

Contact Sales