Security

WordPress Security Keys and Salts

WordPress security keys and salts are random values in wp-config.php that WordPress uses to sign login cookies. Changing them invalidates every active session, which forces any attacker holding a stolen cookie to log in again.

Deep dive

Learn Article

How to Clean a Backdoored WordPress Site After a Bad Plugin

How to clean a backdoored WordPress site: restore a pre-compromise backup, remove the plugin, hunt persistence, rotate credentials, then reinstall.

intermediate 5 min read

Back to glossary