Jethost’s Help Center


Regenerate Authentication Keys and Salts in WP

WordPress uses a set of secret keys and salts to protect user sessions and password data. Over time, these values can become less secure – especially if you’ve migrated your site or shared access. The JetHost Total Care regenerate authentication keys and salts feature helps refresh these values instantly, strengthening your site’s core security.

Why You Should Regenerate Keys and Salts

These keys and salts hash password data and protect cookies and login sessions. If your site gets compromised or these values stay unchanged for years, your user sessions might be easier to hijack.

Regenerating them:

  • Invalidates all current sessions and cookies
  • Forces all users to log in again
  • Makes stolen cookies or compromised sessions useless
  • Adds a clean layer of security with no downtime

This is especially useful after a migration, plugin cleanup, or suspected breach.

What Authentication Keys and Salts Do in WordPress

WordPress uses eight secret keys and salts, stored in your wp-config.php file. These values:

  • Make password hashes more secure
  • Secure the login cookie
  • Help verify session data integrity
  • Prevent cookie theft or session hijacking

If attackers gain access to your database, these keys make it nearly impossible to decrypt passwords or fake sessions.

How to Regenerate Keys and Salts with JetHost Total Care

To control autosave using JetHost Total Care:

1. Log in to your WordPress dashboard.
2. Open the JetHost Total Care section from the sidebar.
3. In the tab Security, scroll to Regenerate Authentication Unique Keys and Salts for WordPress security.
4. Click the Regenerate button.

JetHost Total Care regenerate authentication keys and salts

JetHost Total Care will generate new keys and apply them immediately. You have to authenticate again.

JetHost Total Care Security setting updated

What Happens After Regeneration

Once you regenerate the keys and salts:

  • All active user sessions will be logged out
  • Everyone will be prompted to log in again
  • WordPress will start using the new values to verify future sessions

There’s no risk to site content or settings. The only impact is that logins will be reset, which is intentional and safe.

JetHost Experts Tip

We recommend regenerating your authentication keys and salts every few months or after any major plugin, theme, or hosting change. It’s a quick way to remove lingering session data and reduce long-term security risk.

Need More Help?

The JetHost Total Care regenerate authentication keys and salts feature gives you a powerful one-click way to clean up session data and boost your login security. It takes seconds and can block hours of potential trouble later. Take a look at more WordPress security guides to stay ahead of common issues.