WordPress password hash generator

Locked out of your WordPress admin? Generate the hash of the new password here and change it directly in the wp_users table with phpMyAdmin. You can also check whether a password matches a hash.

Generate password hash

Type the new password and press "Generate hash".

Check a password

Paste the hash from the user_pass field and the password you want to check.

How does WordPress store passwords?

WordPress never stores the plain password, only a hash in the user_pass field of the wp_users table. Since version 6.8 it uses bcrypt prefixed with $wp (for example $wp$2y$10$…); earlier versions used phpass, with hashes starting with $P$B. WordPress 6.8 still accepts the old hashes and upgrades them automatically the next time the user logs in.

How to change a WordPress password from the database

1. Generate the hash of the new password with this tool. 2. Open phpMyAdmin (or your hosting database manager) and go to the wp_users table (the prefix may differ from wp_). 3. Edit your user and paste the hash into the user_pass field, or run the SQL query shown above. 4. Log in with the new password.

Important: paste the hash as it is, without applying the MD5 function in phpMyAdmin. If your WordPress is older than 6.8, use the phpass hash.

Is it safe to generate the hash here?

The hash is calculated on the fly and neither the password nor the result is stored. Even so, if you prefer not to type your final password on a website, generate the hash of a temporary password and change it later from your WordPress profile.