Password Manager For WHMCS

About Password Manager For WHMCS

Password Manager For WHMCS gives you the possibility to store fragile data and share them safely with your staff and clients. The module offers various mechanisms allowing you to smoothly manage sensitive data such as passwords or license keys, in the case of resellers, send email reminders or integrate with your WHMCS client area. Owing to the implementation of advanced two-way encryption, Password Manager For WHMCS provides a high-security level for your and your customers' critical data.

• Admin Area Features:

✔ Create Private Access Details

✔ Share Access Details With Clients & Administrators

✔ Display Clients Access Details In Clients Summary And Clients Tickets

✔ Define Access To Clients Passwords:

✔ Full Access - Any Administrator Can View Any Password

✔ Restricted Access - Allowed Administrators Can View Any Password

✔ Shared Access - Allowed Administrators Can View Shared Passwords

✔ Store All Access Details In Encrypted Format

✔ Add Notes To Password

✔ Copy Usernames And Passwords Into Clipboard

✔ Set Direct Links To Website Or Login Page With Password Used

✔ Display Password Owner

✔ Toggle Availability Of Private Passwords And Product Passwords For Clients

✔ Forbid Password Management For Chosen Clients/Client Groups

✔ Exclude Products/Product Groups From Being Displayed

✔ Allow Clients To Set Master Password For Owned Passwords

✔ Define Client Passwords Limit Per User

✔ Adjust Length And Characters For Random Password Generation

✔ Notify Upon Password Change

✔ Send Password Change Reminder

✔ Define Email Templates For Reminder And Notification

✔ Define Time Period For Password Change Reminder

✔ Customize Module Language Files With "Translations" Tool

✔ Control Staff Access Level To Specific Resources With ACL

• Client Area Features:

✔ Display And Manage Access Details

✔ Display And Add Additional Access Details Of Owned Services

✔ Generate Random Passwords

✔ Copy Usernames And Passwords Into Clipboard

✔ Import And Export Access Details In CSV Format

✔ Share Access Details With Administrators And Clients

✔ Create Shared Categories

✔ Assign Categories To Access Details

✔ Restrict Access To Owned Passwords Using Master Password

• General Info:

✔ High-Level Security With Advanced Two-Way Encryption

✔ Multi-Language Support With Custom Translations Tool

✔ Supports PHP 8.2 Back To PHP 8.1

✔ Supports WHMCS Themes "Six", "Twenty-One", "Lara" And "Lagom WHMCS Client Theme"

✔ Supports WHMCS V8.11 Back To WHMCS V8.8

✔ Requires ionCube Loader V13 Or Later

✔ Easy Module Upgrade To Open Source Version

Installation

This tutorial will show you how to successfully install Password Manager For WHMCS. We will guide you step by step through the whole installation and configuration process.

1. Log in to our client area and download the module.

2. Extract the package and upload its content into the main WHMCS directory. The content of the package to upload should look like this.

3. When you install Password Manager For WHMCS for the first time you have to rename 'license_RENAME.php' file. File is located in 'modules/addons/PasswordManager/license_RENAME.php'. Rename it from 'license_RENAME.php' to 'license.php'.

4. In order to configure your license key, you have to edit a previously renamed 'license.php' file. Enter your license key between quotation marks as presented on the following screen. You can find your license key in our client area → 'My Products'.

5. Remove all files from the 'templates_c' folder located in your WHMCS root directory.

6. Now, set up the 'storage' folder as recursively writable. This folder is available at '/yourWHMCS/modules/addons/PasswordManager/'.

7. Now you have to activate the module in your WHMCS system. Log in to your WHMCS administrator area. Go to 'System Settings' → 'Addon Modules'. Afterwards, find 'Password Manager' and press 'Activate' button.

8. In the next step, you need to permit access to the module. To do so, click on the 'Configure' button, select administrator groups that should have access to this addon, and press 'Save Changes'.

9. You have just successfully installed Password Manager For WHMCS! You can access your module under 'Addons' → 'Password Manager'.

Configuration and Management

Password Manager For WHMCS allows to safely store and share fragile data within your WHMCS. In this short guide, we will present you all the possibilities of our module.

Configuration

Before you start your work with our Password Manager For WHMCS, please move to 'Settings' tab, where you will configure access restrictions to product passwords, define email notifications and manage security settings.

Products/Services Password

First of all, decide whether you wish to allow to display a full list of the client's products and services' login details by selecting the option: 'Client Products/Services Password'. If enabled, access details to client's products and services will be displayed in the client area → 'Password Manager'. 'Exclude Client Groups' - enter any client group name to disable the product's access details from being displayed for clients in these groups. 'Exclude Clients' - disable product access details for pointed here clients. 'Exclude Product Groups' - enter any product group names, to which access details will not be shown. 'Exclude Products' - access details for products, which are entered here, will be disabled.

Client's Private Passwords

The next section is dedicated to the management of private passwords of clients. If you wish to allow your clients to manage their personal access details, select the 'Client's Private Passwords' option. Your clients can be also permitted to set their own 'Master Password' to provide additional protection for their stored passwords. Next, move to the specific configuration: 1. 'Exclude Client Groups' - disable private access details management for selected here client groups. 2. 'Exclude Client' - disable management of private access details for pointed here clients. 3. 'Passwords Limit Per User' - set up the limit of private access details for one client. 4. 'Exclude Client From Limit' - enter clients for which the set up above limit will not be effective.

Email Notifications

This section allows you to define email notification templates that will be sent by the module on specific actions to clients and administrators. 1. 'Password Change Reminder' - select an email template that will be used to remind clients or administrators about the need to change the password. 2. 'Password Change Notification' - select an email template that will be used to notify clients and about a password being changed. Please note that you have to select templates for clients and administrators separately. If you want to disable any of the notifications, simply select 'Unassign' from dropdown menu.

Security Settings

Under the 'Security Settings' tab, you have to define the level of access to clients' passwords for administrators and grant them extended permissions. You may grant your administrators: Full access to clients' passwords - any administrator will be allowed to view clients' passwords Restricted access - only administrators with chosen roles will get access to the passwords Shared access - only passwords marked as 'Shared' will be visible for chosen administrator roles. You may also select here administrators group which will be granted 'Extended Permissions'. It means that administrators from this group will be allowed to view clients' access details when 'Visibility For Administrators:' is checked.

Other

In the very last section you may manage additional options that 'Password Manager For WHMCS ' has to offer. Password Manager Button - select to enable access to 'Password Manager' for your clients in their client area. Profile Tab - select this option to add 'Passwords' tab in the client's profile in the administrator area. Support Tickets Tab - if you select this option, Passwords' tab will be available on the support tickets site. Password Random Characters - define a set of characters to be used for random password generation. Password Strength - define the length of randomly generated passwords. Hide Guide - toggle to turn on the option to hide the guide shown at 'Dashboard'. Do not forget to save the changes when you finish the settings configuration.

Categories

Categories allow you to prepare predefined sets of clients and administrators. By assigning a category to a password, clients and administrators from that category are granted permission to view this password. Move to 'Categories' → 'Administrator Categories' where you can add new sets, press 'Add Category' to begin.

Now, fill out the form with the category name and description. Assign desired clients and administrators to the category and press 'Confirm'.

The list of administrator categories with any details such as listed clients and administrators allowed to access the details is now visible. You may always edit the category or delete it if needed. Use the action buttons to do so.

Access Details

'Access Details' section includes a list of provided access details. Here you can create new access details and decide who can view them. Press 'Add Details' to begin.

Fill in 'Name', enter access details into 'Username' and 'Password'. You can also make your logging in easier by entering the website URL and website login URL consecutively into 'Website URL' and 'Login URL'. To leave a note associated with access details you are creating, type it into 'Additional Notes' textbox. Move to the 'Sharing' part to continue.

In this section choose 'Category' and select 'Administrators', 'Administrator Roles' and 'Clients' who should have access to this details. Note: There is disjunction relation between 'Administrators' and 'Administrator Roles'. For example, if you assign administrators X and Z and administrator role Y in which administrator X is, then all administrators assigned to group Y will see these access details together with administrator Z. Here, you may also allow clients to edit or delete these details, simple mark the 'Permissions' checkbox. 'Permissions' allows you to define clients/administrators/category members privileges. Note: If you leave the 'Clients' checkbox unmarked, your client will not see these access details even if they are chosen in 'Clients' option. When ready, proceed to the 'Notifications' section.

Finally, you can set up notifications rules. 'Allow To Change Password' - message is sent upon password being changed. 'Change Password Reminder' - a notification is sent to remind about the necessity to change the password for security reasons. You can inject the passwords into each of them (depending on the selected email template). Press the 'Confirm' button to finish the process and confirm the creation of access details.

Access Details List

On the list of access details you will see some basic info, such as ID and name, username and password with the possibility to view the password (press the hidden password to make it visible). Press the "Copy" icon and the password or username will be copied to the clipboard. There is also information on the access details owner and administrator groups allowed, list of clients allowed and category assigned.

Use action buttons to manage the entered access details. 1. Log into your website (if URL has been provided) 2. See access details 3. Edit access details 4. Delete access details

Dashboard

A short summary of the clients' and administrators' access details and categories is available on the dashboard. The last tab in the addon is 'Documentation'. When pressed, it redirects you to this very site.

Translations

Customizing language files is now extremely easy with the "Translations" tool that is now available directly in the addon. Its user-friendly design makes managing various language file tweaks a smooth and efficient process. Prepare translations for the original English files with this handy built-in tool. For specific instruction on how to use this tool please refer to its dedicated article, you will find it here.

Access Control

'Access Control' allows you to specify and control exactly which sections of the module can be accessed by your administrators. The way it works is that you create access control rules in which you decide if a specific admin, or admin role has full access, or is restricted to only specific sections.

Rules

Start with creating a new rule, click on the 'Create Rule' button and a dedicated form will appear. Below you will find a description of every field required in the form.

Fill out the following fields to create resources access rule: Rule Name - Pick a name for your rule. Grant Full Access - Enable to grant full access to all sections of the module to the specified personnel. Disable to specify in two additional fields below, to which resources access will be granted, and to which it will be denied. Allow Access To - Designate the resources that the specified personnel will have access to. Restrict Access To - Specify the resources that the specified personnel will not have access to. Administrators - Specify which singular administrators will be subject to the new rule. If the specific administrator is already included in the group you have picked, you do not need to add him separately. Note: All restrictions for specific administrators are summed with the restrictions on their role groups, across all rules. Administrator Roles - Specify which administrator role groups will be subject to the new rule. Important: When picking specific sections, keep in mind that allowing a parent section will also allow all of its children. For example by allowing 'Discounts' you allow 'Discounts → Create,' 'Discounts → Edit' and 'Discounts → Delete.' If you would like to give access to everything about discounts, but the ability to delete them, you can pick 'Discounts' in 'Allow Access To' and then 'Discounts → Delete' in 'Restrict Access To.' Restrict takes precedence over Allow, so if a specific section is included in both, it will be restricted.

To edit or delete existing rules, use the icons to the right.

Resources

Use the toggles in the 'Resources' section to specify which of them should be subject to logging, found in the 'Logs' section. Every time an administrator requests a toggled resource, it will be recorded.

Access Control Logs

The logs section includes: Log ID Name of the administrator Requested resource Applied Resource Rule Name Date Use the trash bin icons to delete specific logs, or utilize the mass action function to delete multiple logs at once.

Administrator Area Integration

Our module integrates with your administrator area as well as the client area. Passwords of any client can be viewed on the summary page as it is shown below, but only if you enable this option in 'Settings' section in the addon. You may add new passwords directly from this site, simply press 'Add New' and you will be moved to the 'New Access Details' form.

Your support operators are also able to access clients' passwords from within the ticket. As you may have noticed, these places allow them not only to see passwords but also to create new ones. Note: this tab is available only if the dedicated option has been enabled in the addon.

Client Area

Your clients can access client area password management page through 'Password Manager' button in navigation bar. To allow integration with the client area, a proper option must be enabled in 'Addon' → 'Settings' → 'Other'.

In 'Password Manager', your clients can view access details depending on the settings configured by the administrator and the level of access allowed for the client. Underneath you can see a client's area with full access to any option given. As you can see, there are four sections available: 'Owned Passwords', 'Shared Passwords', 'Products/Services Passwords' and 'Categories'.

Owned Passwords

If you enabled 'Client Private Passwords' your clients will be allowed to view, manage and create their own access details. Please note that 'Shared' column with information on whether the details are allowed for administrators or not is available only if you select 'Shared Access' in the addon's settings.

Preview the password and use action buttons to manage the access details: 1. Log into URL 2. See the details 3. Edit the details 4. Remove the access details

Add Access Details

To create access details, press 'Add New' button as shown on the following screen.

Type the new password name and enter access details into 'Username' and 'Password'. You can also generate a random password. Optionally, provide 'Website URL' and 'Login URL' to be allowed to log into your site directly from the 'Password Manager' page. Leave a note if you need it.

You may now move to 'Sharing' section. There, you can decide which category the new access details will be assigned to. Choose one from the dropdown menu or select 'Unassigned' to leave it without any category. Depending on the category you select, the access details will be available for those specified in its configuration. Additionally, define which actions can be made on shared passwords. Moreover, you can specify custom email addresses to share your credentials with other customers.

Finally, in ' Notifications' section, set up conditions of delivering password notifications. Enable this option if needed and define when the reminders should be sent. You can also define whether you wish to receive the new password in the message. Do not forget to press 'Save Changes' to finish.

Addtional Actions

If the administrator has enabled the 'Master Password' option in 'Client's Private Passwords' , the clients will have the ability to set additional protection for their owned passwords.

Simply provide and confirm a new password that will protect the access to owned passwords. Note - if you lose or forget this password, you will also lose access to your saved credentials in this section!

From now on, access to the 'Owned Passwords' section will require the master password.

You may change the password or disable this option at any time.

Among the additional actions you will also find a feature that allows you to export the passwords to a file. Press and the generated file will be saved on your disk.

You may also import your private passwords. Press the button and find a ready file to upload the passwords to the group of 'Owned Passwords'. You may upload files in a CSV format only.

Shared Passwords

Under 'Shared Passwords' your clients can view and manage access details that administrators shared with them, gave permission to view.

Preview the password and use action buttons to manage the access details: 1. Log into the URL if it has been provided 2. See the details 3. Edit the details (General/Sharing/Notifications) 4. Remove the details 5. Copy the password/ username to the clipboard

Product/Services Passwords

'Products/Services Passwords' section includes any access details to your client's products that they own. For convenience, clients can also assign additional passwords to selected services similarly like in 'Owned Passwords' section. Remember that as an administrator, you have to enable this option in the 'Addon' → 'Settings'→ 'Products/Services Passwords'.

Furthermore, you may export the passwords bundle into a file or, the other way round, import your passwords from a CSV file to the module.

Categories

Move to 'Categories' tab. There is a list of the created by the client categories which are used to allocate passwords for sharing. To create a new one, press the 'Add Category' button.

Fill in category name and description and press 'Add'. Created category can be seen by this client as well as administrators in the administrator area.

Clients may edit their categories, and delete and add new ones any time they wish.

Any categories created by clients will be automatically visible for administrators in the addon where you can manage them.

Tips

1. Any additional options under 'Addons' → 'Passwords Manager' → 'Settings' → 'Other' are by default enabled on the module activation. If you change any of these settings you will lose access to some of the module's functionalities.

2. Password Manager For WHMCS ensures full protection of your access details using its own security tools and WHMCS internal two-way encryption system. Note: the custom encryption key is stored in the 'configuration.php' file.

3. As this module supports a templates system, any changes made in the module's templates files will be saved after the upgrade process.

4. Password Manager For WHMCS module is a perfect solution for all resellers whose aim is to provide license keys to their clients in the most secure way possible.

Update Instructions

An essential guidance through the process of updating the module is offered here. Ensure successful completion of the module update by carefully following each step, thereby preventing data loss or any unforeseen issues. Additionally, you will find a current list of supplementary actions necessary for a smooth update process there.

Upgrade Guide

Seeking a solution that offers greater flexibility, customization tailored to your precise needs, and unrestricted availability? There is an option that not only proves to be cost-effective in the long run but also includes prioritized support services, making it a truly valuable investment. Opt for the Open Source version of your Password Manager For WHMCS module to unlock these benefits. Simply click on either the Get Source Code or Upgrade To Lifetime button found on the product's page in our client area to complete the one-step upgrade process, with a dedicated discount already applied. Follow a comprehensive guide covering the transition process, the advantages it brings, and step-by-step instructions on what to do next after the order has been successfully finalized.

Common Problems

1. When you have problems with connection, check whether your SELinux or firewall does not block ports.