Free tool · runs in your browser

wp-config.php Generator

wp-config.php is the most important file of your WordPress installation – and usually untouched since setup. This generator lets you pick the hardening options that fit your site and copy the finished block.

wp-config.php Hardening

Generate security constants

Pick options, copy the block – add it above "That's all, stop editing!". All in your browser.

Disable the in-dashboard file editor DISALLOW_FILE_EDIT – prevents editing theme/plugin code via the dashboard. Admin over HTTPS only FORCE_SSL_ADMIN – enforces encrypted logins. No debug output on live sites WP_DEBUG = false – no error messages for visitors.

Limit post revisions WP_POST_REVISIONS – keeps the database lean.

Max revisions

Control automatic core updates WP_AUTO_UPDATE_CORE – minor (recommended), all or none.

Block all file changes DISALLOW_FILE_MODS – also blocks plugin/theme/core updates. Set deliberately only. Generate new security keys AUTH_KEY & co. – generated randomly in the browser. Replaces old keys (logs everyone out).

Everything runs locally in the browser. Make a backup before editing wp-config.php.

Everything is generated locally in your browser. Nothing you enter is transmitted to our server.

How it works

1 Pick the options you want to set
2 Security keys are generated locally in your browser
3 Copy the block and paste it into wp-config.php

Guides for this tool

Hardening wp-config.php: The Most Important Security Constants wp-config.php is the control centre of every WordPress install. A few constants make it considerably safer – file editor off, force HTTPS, new security keys.

Related Services

WordPress Maintenance

Reliable WordPress care with updates, backups and security monitoring.

wp-config.php Generator

How it works

Guides for this tool

Related Services

More tools