I'm trying to find some information on how the authentication keys and salts work in WordPress, but unfortunately I wasn't able to find anything useful. All I got is that the keys should be random, long and different from each other. They should be set in the
wp-config.php file because they "greatly increase site's security" by "ensuring better encryption of information stored in the user's cookies".
I actually have some questions, not just one, but I think they should be in one thread because they're closely related.
What does the "better encryption of information" mean exactly? I mean in contrast to the situation without the keys.
Why do I need 8 keys, and not just one? Judging by the names --
NONCE-- they should set four cookies. One and two for authentication via http and https protocols respectively, three for being logged and 4... I have no idea what that would be for.
Why do I need keys and salts? Wouldn't that work just for keys? They pretty long and random, so what is the purpose of additional salts in this case?
I've read another question (I don't remember exactly where that was) and there was info that if you delete the keys and salts from
wp-config.phpfile, they will be stored in the WordPress database under
wp_optionstable. And that's true, I've tested that, the keys were created and put into the table. But what would happen when I restored the (different) keys in the
wp-config.phpfile? Will the two keys from the
wp-config.phpfile and the database be combined into one, as the question suggested, or just one of them will be used, if so, which one?
What actually happens when a user visits my blog? He has an account, see the main page and log into the system, and what's next? I mean what happens with the keys, cookies (and everything else) in this time? What is the exact process of logging into a WordPress website?
What is the best size of the keys? The default one is 64 characters. Is there any limit here?
Can I put whatever character in the keys (of course, without
')? Can I use foreign language characters, for instance,
Ż? What about