Generate a secure $cfg['blowfish_secret'] (32–128 chars) using your pma_blowfish.php endpoint.
$cfg['blowfish_secret']
pma_blowfish.php
config.inc.php
$cfg['blowfish_secret'] = '…';