Salt Shaker

Plugin Banner

Salt Shaker

by Nagdy

Download
Description

By using Salt Shaker plugin, you’ll be able to harden your WordPress security. It allows you to change the salt keys either manually or automatically.

Try it out on a free dummy site.

Why Use SALT Keys in WordPress?

When you log in to WordPress, you have the option to remain logged in long-term. To achieve this, WordPress stores your login data in cookies instead of in a PHP session. Malicious individuals can hijack your cookies through various means, leaving your website vulnerable.

To make it harder for attackers to use cookie data, you can take advantage of SALT keys. WordPress SALT keys encrypt your password, making it harder to guess. What’s more, it’s next to impossible for hackers to simply ‘unscramble’ the result in order to get at the original password.

Read more on WPEngine Blog

What people says about Salt Shaker

WPBeginner
Kinsta
WPEngine
Elgenat Themes
Hostinger

Like Salt Shaker? Consider leaving a 5 star review.

Salt Shaker Features

  • Improve your WordPress security.
  • Easy to use, set it and forget it, with minimal settings.
  • Manual and immediate WP security keys and salts changing.
  • Set automated schedule for keys and salts change.

Developers?

Feel free to fork the project on GitHub and submit your contributions via pull request.

  1. Upload salt-shaker folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the Plugins menu in WordPress.
  3. Navigate to Tools > Salt Shaker menu to configure the plugin.
  1. Plugin Settings.

    Plugin Settings.

Nothing happens?

Make sure that wp-config.php file has the salt keys. If for any reason the keys aren’t there; you can always generate a set of keys from this link https://api.wordpress.org/secret-key/1.1/salt/ and add it to your wp-config.php file. Once that’s done, the plugin will be able to shake them based on your settings.

The plugin isn’t working or have a bug?

Post detailed information about the issue in the support forum and we will work to fix it.

Custom wp-config.php location?

You can use this filter to define the file location salt_shaker_salts_file. Example:
In this example, the new location of the config file is in a folder that’s outside WordPress location in a folder called wpsecret. Make sure to replace it with your secret location 😉

function salt_shaker_new_file($salts_file_name) {
    $salts_file_name = '../wpsecret/wp-config';
    return $salts_file_name;
}

add_filter('salt_shaker_salts_file', 'salt_shaker_new_file');

Salt Shaker

By muhammedhamed on May 30, 2024

good and valid

All Systems Go!

By Jimmy Lee (shirtguy72) on May 18, 2023

Reviewed the changelog before installing, glad file permissions are now left alone, confirmed, all working as expected. Great plugin, thanks! 5-Stars!

Excellent addition to my security arsenal!

By now4dw on March 9, 2023

This is a simple, elegant and yet powerful addition to any security you might already have on your site/sites.

I have been the victim of cookie hijacking. It wasn't a pleasant experience!

This plugin ensures you and your team log out according to a fixed schedule resulting in a fresh cookie when you log back in. Indispensable!

Best Salt & Key Plugin

By gopalb123 on February 28, 2023

This plugin (Salt Shaker) is amazing, and every WP website needs it. Use this plugin to keep your website secure.<gwmw style="display:none;"></gwmw>

this is one the best plugins

By Tawfiq Makhamreh (tawfiq1616) on January 12, 2023

this is great plugin, each site should have it. you will not have it with other plugins, keep your site safe

Wonderfull

By saadezz on June 28, 2022

The plugin works fine

White screen

By Breinbrouwsels on September 14, 2021

This plugin left me with a white screen

Must have plugin for wp security.

By Md. Redwan Hossain (redwancou) on June 14, 2021

Great plugin.

Good work

By mouadhboukefa on April 7, 2021

Very useful and well built

One of the Best Plugins I Use

By donkiely on June 18, 2020

This is one of the best plugins I use on my sites. It is simple to use, does exactly what it is supposed to, and best of all boosts the security of my sites. The only thing that confuses me about it is, why don't way more sites use it??!!?

2.0.1

  • Improved salt generation and replacement
  • WordPress 6.8 compatibility

Read the full changelog here

Back to top