wp-config.php generator Create your personalized WordPress configuration file.

Create your own wp-config.php

Select each section in the sidebar, fill in your settings, then click Generate. Once generated you can copy or download the file.

This site does not store any data, passwords or configuration anywhere — you can fill in real credentials safely.

Random generated wp-config.php

This is a sample — customize it using the sections on the left.

wp-config.php 
<?php

/* Environment */
define( 'WP_ENVIRONMENT_TYPE', 'production' );
define( 'WP_DEVELOPMENT_MODE', '' );

/* Database connection */
define( 'DB_NAME', 'your_own_database_name' );
define( 'DB_USER', 'your_own_database_user' );
define( 'DB_PASSWORD', 'your_own_database_password' );
define( 'DB_HOST', 'localhost' );
define( 'DB_CHARSET', 'utf8mb4' );
define( 'DB_COLLATE', 'utf8mb4_general_ci' );

/* Tables */
$table_prefix = 'wp4dxvq1_';

/* Security */
/* Security Keys */
define( 'AUTH_KEY', 'JZ.WHh+}|Cf60*A-.;?sxtRA+6*-~Vh!}+fv=E[6EH0/ED5G=p/<))1dNpb24pVC' );
define( 'SECURE_AUTH_KEY', 'FT1l^dfg$ZAE1Rk@hE@sbZa>y{/i4UG<7^@0?jA|hH~|)V,yO34Z$wit6PIrr{*$' );
define( 'LOGGED_IN_KEY', 'je];d.us)=I4r3QTlkXZDVvY=iz6Va:~1/%KTsyEAq7;<Ijk2r-QwBN!)b2Qa4+X' );
define( 'NONCE_KEY', 'z(VWg>=~NHDmihrZ~41$W$jB|9wS.r+B4=];glEHtJI5P3O,bxklCA;ixn[[|jK<' );
define( 'AUTH_SALT', 'aj7YrEWeOJ?z#dXmF$IAdj/A@T]CehVZz=,I|wsJ5EA#_a}D~h2j77KFUp&p/KDw' );
define( 'SECURE_AUTH_SALT', 'D9csH[yI]g[lHGx;Hj5B?Ev86vTD?a(zn0msn$Sw(BkCb7wz4r~$s/knS$D!ZujN' );
define( 'LOGGED_IN_SALT', '}JE$NKY,2_rZfn_r6Jk6A<LBlX:.X&B9l+Iq7.i]989IwvH1JM/DK%6Vzi{a4;UQ' );
define( 'NONCE_SALT', '1[5&TAvqMik=6ewKpIhQVbeTevJ7AWz_Tf)>NPhh&;G1pP=PF$B-XAZ%6@G_*]h-' );
/* HTTPS */
define( 'WP_DISABLE_FATAL_ERROR_HANDLER', false );
define( 'WP_DISABLE_ADMIN_EMAIL_VERIFY_SCREEN', false );

/* URL / Path */

/* Cookies */
define( 'TEST_COOKIE', 'wordpress_test_cookie' );
define( 'COOKIEHASH', 'txfFNmrDYkeFrIDcFNAg9CzhqKXDAZ6Yp5rQYs2W9zmEjGvDbLOpYdNdvMQPrVSR' );
define( 'LOGGED_IN_COOKIE', 'wordpress_logged_in_txfFNmrDYkeFrIDcFNAg9CzhqKXDAZ6Yp5rQYs2W9zmEjGvDbLOpYdNdvMQPrVSR' );
define( 'SECURE_AUTH_COOKIE', 'wordpress_logged_in_txfFNmrDYkeFrIDcFNAg9CzhqKXDAZ6Yp5rQYs2W9zmEjGvDbLOpYdNdvMQPrVSR' );
define( 'AUTH_COOKIE', 'wordpress_txfFNmrDYkeFrIDcFNAg9CzhqKXDAZ6Yp5rQYs2W9zmEjGvDbLOpYdNdvMQPrVSR' );
define( 'PASS_COOKIE', 'wordpresspass_txfFNmrDYkeFrIDcFNAg9CzhqKXDAZ6Yp5rQYs2W9zmEjGvDbLOpYdNdvMQPrVSR' );
define( 'USER_COOKIE', 'wordpressuser_txfFNmrDYkeFrIDcFNAg9CzhqKXDAZ6Yp5rQYs2W9zmEjGvDbLOpYdNdvMQPrVSR' );
define( 'RECOVERY_MODE_COOKIE', 'wordpress_rec_txfFNmrDYkeFrIDcFNAg9CzhqKXDAZ6Yp5rQYs2W9zmEjGvDbLOpYdNdvMQPrVSR' );

/* Content */
define( 'AUTOSAVE_INTERVAL', 30 );
define( 'WP_POST_REVISIONS', 5 );
define( 'MEDIA_TRASH', true );
define( 'WP_ALLOW_COLLABORATION', false );
define( 'EMPTY_TRASH_DAYS', 7 );
define( 'WP_MAIL_INTERVAL', 86400 );

/* Memory */
define( 'WP_MEMORY_LIMIT', '128M' );
define( 'WP_MAX_MEMORY_LIMIT', '256M' );

/* Updating */
define( 'AUTOMATIC_UPDATER_DISABLED', false );
define( 'WP_AUTO_UPDATE_CORE', 'minor' );
define( 'CORE_UPGRADE_SKIP_NEW_BUNDLED', true );

/* File edition */
define( 'DISALLOW_FILE_MODS', false );
define( 'DISALLOW_FILE_EDIT', true );
define( 'IMAGE_EDIT_OVERWRITE', true );

/* Performance */
define( 'WP_CACHE', true );
define( 'WP_CACHE_KEY_SALT', 'et7wnlp5nusc4iqrv6:' );
define( 'COMPRESS_CSS', true );
define( 'COMPRESS_SCRIPTS', true );
define( 'CONCATENATE_SCRIPTS', false );
define( 'ENFORCE_GZIP', true );

/* Cron */
define( 'DISABLE_WP_CRON', false );
define( 'ALTERNATE_WP_CRON', false );
define( 'WP_CRON_LOCK_TIMEOUT', 60 );

/* FTP Access */

/* Plugins Must-Use */

/* Filtering */
define( 'DISALLOW_UNFILTERED_HTML', false );
define( 'ALLOW_UNFILTERED_UPLOADS', false );

/* Feed reader */
define( 'MAGPIE_CACHE_ON', true );
define( 'MAGPIE_CACHE_DIR', 'cache' );
define( 'MAGPIE_CACHE_AGE', 3600 );
define( 'MAGPIE_CACHE_FRESH_ONLY', false );
define( 'MAGPIE_DEBUG', false );
define( 'MAGPIE_USER_AGENT', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:130.0) Gecko/20100101 Firefox/130.0' );
define( 'MAGPIE_FETCH_TIME_OUT', 5 );
define( 'MAGPIE_USE_GZIP', true );

/* MultiSite */
define( 'WP_ALLOW_MULTISITE', false );
define( 'WP_DEFAULT_THEME', 'twentytwenty' );

/* External URL Requests */
define( 'WP_HTTP_BLOCK_EXTERNAL', false );
if ( WP_HTTP_BLOCK_EXTERNAL ) {
    define( 'WP_ACCESSIBLE_HOSTS', '*.wordpress.org,*.github.com' );
}

/* File permissions */

/* Proxy */

/* Debug */
define( 'WP_DEBUG', false );
if ( WP_DEBUG ) {
    define( 'WP_DEBUG_DISPLAY', false );
    define( 'WP_DEBUG_LOG', false );
}
define( 'SCRIPT_DEBUG', false );
define( 'SAVEQUERIES', false );

/* Do not change anything else after this line! Thank you! */

if ( ! defined( 'ABSPATH' ) )
  define( 'ABSPATH', dirname( __FILE__ ) . '/' );
require_once ABSPATH . 'wp-settings.php';

Environment

production (default): A site that is running live, connected to the internet and reachable on the internet.
staging: This is what you would use for staging environments, probably both connected to and reachable on the internet.
development: This is what you would use for development environments that are reachable on the internet, we automatically enable WP_DEBUG on environments where this is the environment type.
local: This (usually development) environment can reach the internet but is not be reachable from the internet.
none (default): No development environment is set.
core: Used for Core development.
plugin: Used for a plugin development.
theme: Used for a theme development.
all: All of the them.

Database connection

Database name used by WordPress.
Username used to access database.
Password used by username to access database.
Host of your database server. A port number, Unix socket file path or pipe may be needed as well.
Database character set used by WordPress.
Database collation used by WordPress.

Database tables

Prefix placed before WordPress tables.
Use a custom 'wp_user' table, without prefix.
Use a custom 'wp_usermeta' table, without prefix.

Security

Improve information encryption stored at user's cookies. Also, use WordPress API 'salt' generator.
Force HTTPS on login page (/wp-login.php).
Force HTTPS on admin pages (/wp-admin/).
Allows control over fatal errors.
URL with information about PHP updates/upgrades.
Shows the Admin Email Verification Screen.

URL / Path

Your Wordpress site URL. Like https://www.example.com/blog. Without trailing slash.
Your WordPress core files URL. Like https://www.example.com/wordpress. Without trailing slash.
Custom 'wp-content' absolute path. Like /home/example.com/public_html/wp-content. Without trailing slash.
Custom 'wp-content' URL. Like https://www.example.com/wp-content. Without trailing slash.
Custom 'plugins' absolute path. Like /home/example.com/public_html/wp-content/plugins. Without trailing slash.
Custom 'plugins' URL. Like https://www.example.com/wp-content/plugins. Without trailing slash.
Custom 'uploads' relative path. Like wp-content/uploads. Without start or trailing slash.

Cookies

Hostname to set up cookies. Like something.example.com.
Value to check if cookies are active. Like wordpress_test_cookie.
Cookie with logged in info. Like wordpress_logged_in_ + hash.
Cookie with secure auth info. Like wordpress_sec_ + hash.
Cookie with auth info. Like wordpress_ + hash.
Cookie with password info. Like wordpresspass_ + hash.
Cookie with user info. Like wordpressuser_ + hash.
Cookie with Recovery Mode info. Like wordpress_rec_ + hash.

Content

Autosave seconds (in post / pages...). WordPress default: 60 seconds.
Content revisions. true for unlimited. WordPress default: unlimited.
Use trash for Media. WordPress default: disabled.
Allow real-time collaboration (RTC). true lets the user enable it. WordPress default: false.
Days to empty trash content. WordPress default: 30 days.
Who posts by mail? WordPress default: 5 minutes.

Memory

Frontend memory limit. WordPress default: 40 MB.
Backend memory limit. WordPress default: 256 MB.

Updating

Allow WordPress automatic updating.
WordPress core automatic updating. Major versions (5.x); Minor versions (5.0.x); Candidate versions (5.x-rc); Beta versions (5.x-beta).
Install new bundled plugins or themes on updates.
Upgrade automatically the database tables when needed.
Warning: Disabling this option could create problems if you do not know how to upgrade manually.

File edition

Enable or disable update and installation inside /wp-admin/.
Enable or disable the plugin/theme editor.
When you restore the original image, overwrites the set created.

Performance

Allows use of cache.
Cache unique identificator.
Compresses CSS.
Compresses scripts.
Concatenates scripts.
Forces GZIP compression for browsers.

Tasks

Use the internal WP-Cron. Default: enabled.
If you have problems with the actual cron, try this. Default: disabled.
Cron timeout, in seconds. Default: 60 seconds.

FTP Access

Enables feed reader cache.
Absolute FTP path to WordPress core files.
Absolute FTP path to content files.
Absolute FTP path to plugin files.
Absolute FTP path to public key.
Absolute FTP path to private key.
FTP or SSH username.
FTP or SSH password.
FTP or SSH hostname.
Allows SFTP connection (not SSH FTP).

Plugins Must-Use

Full path, without trailing slash. Default: /wp-content/mu-plugins.
Full URL, without trailing slash. Like https://www.example.com/wp-content/mu-plugins.
Relative to ABSPATH, without trailing slash. Default: wp-content/mu-plugins.

Filtering

Disables scripts and HTML tags. Default: enabled. Warning: Disabling this option could allow Cross-site scripting (XSS) attacks.
Disables insecure files to be uploaded (like PHP files). Default: enabled. Warning: Disabling this option could allows big security risks.

Feed reader

Enables feed reader cache.
Feed reader cache directory. Relative path to /wp-content/. Like cache caching on /wp-content/cache.
How old the feed reader cache must be to invalidate?.
Enables feed reader debugger.
User-Agent to retrieve feeds.
Fetch timeout, in seconds. Default: 5 seconds.
Use GZIP on fetching feeds.

MultiSite

Enables WordPress MultiSite or Network or MultiNetwork.
Enabled means subdomains, disabled means folders.
Main URL if a sub-site does not exists. Like https://www.example.com/.
Default theme when a new site is created.

External requests

Blocks HTTP external URL requests.
List of hosts to which exceptionally you will have access.

File permissions

This was developed in response to the problem of the core update function failing with hosts running under suexec(). If a host uses restrictive file permissions (e.g. 400) for all user files, and refuses to access files which have group or world permissions set, these definitions could solve the problem.

Proxy

The proxy host or IP address.
The proxy port.
The proxy username (if protected).
The proxy password (if protected).
Hosts to bypass (if needed).

Debug

Debug mode for errors and warnings.
Display errors and warnings on screen.
Log code errors and warnings.
Changes default log file path with your path and file.
Log code errors and warnings.
Save SQL database queries.