Hi @mattias.olsson
The salt parameter is a random hash to include in the config.inc.php file. You can create it manually or using some online password generator.
; Enabling this option provides some amount of additional security, but may
; cause problems for users behind a proxy farm (e.g., AOL).
session_check_ip = On
; The encryption (hashing) algorithm to use for encrypting user passwords
; Valid values are: md5, sha1
; NOTE: This hashing method is deprecated, but necessary to permit gradual
; migration of old password hashes.
encryption = sha1
; The unique salt to use for generating password reset hashes
salt = "YouMustSetASecretKeyHere!!"
; The unique secret used for encoding and decoding API keys
api_key_secret = ""
; The number of seconds before a password reset hash expires (defaults to 7200 / 2 hours)
reset_seconds = 7200
; Allowed HTML tags for fields that permit restricted HTML.
; Use e.g. "img[src,alt],p" to allow "src" and "alt" attributes to the "img"
; The unique salt to use for generating password reset hashes
salt = "YouMustSetASecretKeyHere!!"
You can use a free service to generate the password for the salt parameter:https://www.random.org/strings/
Please, read more about it from this Documentation link:https://docs.pkp.sfu.ca/admin-guide/en/securing-your-system#the-basics
Best,