WordPress Password Hash Generator

Why Choose This Password Hash Generator?

This free WordPress password hash generator creates hashes for WordPress 6.8 and newer using the current default bcrypt format. Your password and generated hash stay in your browser; this page does not submit them to a server.

WordPress 6.8 changed its default user-password hashing from phpass to bcrypt. Core trims the password, applies HMAC-SHA-384 using the wp-sha384 key, Base64-encodes that digest, then hashes it with bcrypt and adds the $wp prefix. This generator follows that sequence with bcrypt cost 10, matching WordPress core’s default. Sites can customize password hashing with plugins or filters, so generated hashes may not match sites that use a custom hasher.

This tool targets WordPress 6.8 and newer. Its generated $wp$2y$ format is not supported by earlier WordPress releases. For older installations, use their password reset flow or a generator that supports their legacy hashing format.

How to Reset a WordPress Password

The easiest option is to sign in to WordPress, open Users → Profile, set a new password, and save. If you cannot sign in, use the Lost your password? link on the login page and follow the email reset link.

Generate a WordPress Password Hash

Enter the password you want to use and click Generate Hash. The tool checks that the password is not empty, then creates a bcrypt hash compatible with WordPress 6.8 and newer. Click Copy to copy the result. Hash generation uses the browser’s Web Crypto API; bcrypt runs locally using a JavaScript library loaded from jsDelivr. Keep the password and hash private.

Updating the Password Hash

Only use direct database editing when you understand the risks and have a current database backup. A wrong change can lock you out. In phpMyAdmin, open your WordPress database, locate the wp_users table (your table prefix may differ), find the correct user row, and replace the user_pass value with the generated hash. This hash format is for WordPress 6.8 and newer. The database may use a custom table prefix instead of wp_.

You can also update the value with a SQL query, replacing the table name, generated hash, and username with the correct values:

UPDATE `wp_users`
SET `user_pass` = 'YOUR_GENERATED_HASH'
WHERE `user_login` = 'USER_LOGIN';

Take care to target exactly one account. Prefer the WordPress dashboard or a password-reset link when available; those methods let WordPress apply the site’s configured hashing behavior automatically.