Salt Shaker
Active Installs
6,000+
Last Updated
December 1, 2025
First Released
October 17, 2016
Download History (Last one month)
By using Salt Shaker plugin, you’ll be able to harden your WordPress security. It allows you to change the salt keys either manually or automatically.
Try it out on a free dummy site.
Why Use SALT Keys in WordPress?
When you log in to WordPress, you have the option to remain logged in long-term. To achieve this, WordPress stores your login data in cookies instead of in a PHP session. Malicious individuals can hijack your cookies through various means, leaving your website vulnerable.
To make it harder for attackers to use cookie data, you can take advantage of SALT keys. WordPress SALT keys encrypt your password, making it harder to guess. What’s more, it’s next to impossible for hackers to simply ‘unscramble’ the result in order to get at the original password.
What people says about Salt Shaker
WPBeginner
Kinsta
WPEngine
Elgenat Themes
Hostinger
Like Salt Shaker? Consider leaving a 5 star review.
Salt Shaker Features
- Improve your WordPress security.
- Easy to use, set it and forget it, with minimal settings.
- Manual and immediate WP security keys and salts changing.
- Set automated schedule for keys and salts change.
Developers?
Feel free to fork the project on GitHub and submit your contributions via pull request.
- Upload
salt-shakerfolder to the/wp-content/plugins/directory. - Activate the plugin through the
Pluginsmenu in WordPress. - Navigate to
Tools > Salt Shakermenu to configure the plugin.
Screenshot Gallery
Make sure that wp-config.php file has the salt keys. If for any reason the keys aren’t there; you can always generate a set of keys from this link https://api.wordpress.org/secret-key/1.1/salt/ and add it to your wp-config.php file. Once that’s done, the plugin will be able to shake them based on your settings.
Post detailed information about the issue in the support forum and we will work to fix it.
You can use this filter to define the file location salt_shaker_salts_file. Example:
In this example, the new location of the config file is in a folder that’s outside WordPress location in a folder called wpsecret. Make sure to replace it with your secret location 😉
function salt_shaker_new_file($salts_file_name) {
$salts_file_name = '../wpsecret/wp-config';
return $salts_file_name;
}
add_filter('salt_shaker_salts_file', 'salt_shaker_new_file');
Changelog
2.1.1
- Fixed an issue with 2.1.0 not working because of a missing Freemius SDK file.
2.1.0
- Added comprehensive audit trail logging for all salt rotations
- Automatic cleanup of old logs with configurable retention periods
- Performance improvements and better error handling
- WordPress 6.9 compatibility
2.0.1
- Improved salt generation and replacement
- WordPress 6.8 compatibility
Read the full changelog here
" width="120" height="120">
Available Versions
| Version | Download | Type |
|---|---|---|
| 2.1.1 | Download | Stable |
| 2.1.0 | Download | Stable |
| 2.0.1 | Download | Stable |
| 2.0.0 | Download | Stable |
| 1.4.8 | Download | Stable |
| 1.4.7 | Download | Stable |
| 1.4.6 | Download | Stable |
| 1.4.5 | Download | Stable |
| 1.4.4 | Download | Stable |
| 1.4.3 | Download | Stable |
| 1.4.2 | Download | Stable |
| 1.4.1 | Download | Stable |
| 1.4.0 | Download | Stable |
| 1.3.2 | Download | Stable |
| 1.3.1 | Download | Stable |
| 1.3.0 | Download | Stable |
| 1.2.9 | Download | Stable |
| 1.2.8 | Download | Stable |
| 1.2.7 | Download | Stable |
| 1.2.6 | Download | Stable |
| 1.2.5 | Download | Stable |
| 1.2.4 | Download | Stable |
| 1.2.3 | Download | Stable |
| 1.2.2 | Download | Stable |
| 1.2.1 | Download | Stable |
| 1.2 | Download | Stable |
| 1.1.6 | Download | Stable |
| 1.1.5 | Download | Stable |
| 1.1.4 | Download | Stable |
| 1.1.3 | Download | Stable |
| 1.1.2 | Download | Stable |
| 1.1.1 | Download | Stable |
| 1.1 | Download | Stable |
| 1.0 | Download | Stable |
| Development | Download | Trunk |
