Ervik's picture


I am wondering if the SALT code in wp-config.php is generated when a new WP site is made, or if we need to change the SALT code in that file.

Jeremy Davis's picture

Hi Eric, thanks for your question.

Where relevant, all of our appliances should regenerate unique "secrets" on firstboot. In this context, "secrets" include salts and other things such as application specific database passwords, etc.

In the case of the WordPress appliance; as of v16.0, it uses the pre-installed "wpcli" tool to regenerate the salts. In previous versions we regenerated them using the shell-builtin "mcookie" command.

Add new comment