wp-config.php
Quick Definition
wp-config.php is the most important configuration file in WordPress. It contains your database credentials, security keys, and core settings that WordPress needs to connect to your database and run.
What Is wp-config.php?
According to the official WordPress documentation, wp-config.php is "one of the most important files in your WordPress installation." It contains your website's base configuration details — most critically, the information WordPress needs to connect to your MySQL database.
The file lives in the root directory of your WordPress installation. It's created during installation when you copy wp-config-sample.php and fill in your settings.
Core settings:
- Database credentials:
DB_NAME,DB_USER,DB_PASSWORD,DB_HOST - Security keys and salts — 8 unique random strings for cookie encryption
- Table prefix — default
wp_ - DB_CHARSET — default
utf8
wp-config.php in Practice
Powerful features you enable here:
WP_DEBUG— debug mode for troubleshootingFORCE_SSL_ADMIN— forces HTTPS on adminWP_ALLOW_MULTISITE— enables MultisiteDISALLOW_FILE_EDIT— disables theme/plugin editor (security)WP_MEMORY_LIMIT— increases PHP memory
Never use a word processor to edit this file. Access via SFTP or file manager. A typo can take your site offline.
Why It Matters
wp-config.php holds your database password and controls critical features. See our security guide and file permissions guide.