Password Manager For WHMCS

About Password Manager For WHMCS

Password Manager For WHMCS gives you the possibility to store fragile data and share them safely with your staff and clients. The module offers various mechanisms allowing you to smoothly manage sensitive data such as passwords or license keys, in the case of resellers, send email reminders or integrate with your WHMCS client area. Owing to the implementation of advanced two-way encryption, Password Manager For WHMCS provides a high-security level for your and your customers' critical data.

• Admin Area Features:

✔ Create Private Access Details

✔ Share Access Details With Clients & Administrators

✔ Display Client Access Details In Clients Summary And Clients Tickets

✔ Define Access To Clients Passwords:

✔ Full Access - Any Administrator Can View Any Password

✔ Restricted Access - Allowed Administrators Can View Any Password

✔ Shared Access - Allowed Administrators Can View Shared Passwords

✔ Store All Access Details In Encrypted Format:

✔ Use Public Keys To Encrypt Passwords

✔ Use Private Keys Or Secrets To Decrypt Passwords

✔ Add Tags To Passwords

✔ Add Notes To Passwords

✔ Copy Usernames And Passwords Into Clipboard

✔ Set Direct Links To Website Or Login Page With Password Used

✔ Display Password Owner

✔ Add And Manage Encryption Keys

✔ Organize Passwords Using:

✔ Categories

✔ Tags

✔ Toggle Availability Of Private Passwords And Product Passwords For Clients

✔ Forbid Password Management For Chosen Clients/Client Groups

✔ Exclude Products/Product Groups From Being Displayed

✔ Allow Clients To Set Master Password For Owned Passwords

✔ Define Client Passwords Limit Per User

✔ Adjust Length And Characters For Random Password Generation

✔ Notify Upon Password Change

✔ Send Password Change Reminder

✔ Define Email Templates For Reminder And Notification

✔ Define Time Period For Password Change Reminder

✔ Customize Module Language Files With "Translations" Tool

✔ Control Staff Access Level To Specific Resources With ACL

✔ View And Manage Logs

• Client Area Features:

✔ Display And Manage Access Details

✔ Display And Add Additional Access Details Of Owned Services

✔ Generate Random Passwords

✔ Copy Usernames And Passwords Into Clipboard

✔ Import And Export Access Details In CSV Format

✔ Share Access Details With Administrators And Clients

✔ Create Shared Categories

✔ Assign Categories To Access Details

✔ Restrict Access To Owned Passwords Using Master Password

• General Info:

✔ High-Level Security With Advanced Two-Way Encryption

✔ Multi-Language Support With Custom Translations Tool

✔ Supports PHP 8.2 Back To PHP 8.1

✔ Supports WHMCS Themes "Six", "Twenty-One", "Lara" And "Lagom WHMCS Client Theme"

✔ Supports WHMCS V8.12 Back To WHMCS V8.9

✔ Requires ionCube Loader V13 Or Later

✔ Easy Module Upgrade To Open Source Version

Installation

This tutorial will show you how to successfully install Password Manager For WHMCS. We will guide you step by step through the whole installation and configuration process.

1. Log in to our client area and download the module.

2. Extract the package and upload its content into the main WHMCS directory. The content of the package to upload should look like this.

3. When you install Password Manager For WHMCS for the first time you have to rename 'license_RENAME.php' file. File is located in 'modules/addons/PasswordManager/license_RENAME.php'. Rename it from 'license_RENAME.php' to 'license.php'.

4. In order to configure your license key, you have to edit a previously renamed 'license.php' file. Enter your license key between quotation marks as presented on the following screen. You can find your license key in our client area → 'My Products'.

5. Remove all files from the 'templates_c' folder located in your WHMCS root directory.

6. Now, set up the 'storage' folder as recursively writable. This folder is available at '/yourWHMCS/modules/addons/PasswordManager/'.

7. Now you have to activate the module in your WHMCS system. Log in to your WHMCS administrator area. Go to 'System Settings' → 'Addon Modules'. Afterwards, find 'Password Manager' and press 'Activate' button.

8. In the next step, you need to permit access to the module. To do so, click on the 'Configure' button, select administrator groups that should have access to this addon, and press 'Save Changes'.

9. You have just successfully installed Password Manager For WHMCS! You can access your module under 'Addons' → 'Password Manager'.

Configuration and Management

Password Manager For WHMCS allows to safely store and share fragile data within your WHMCS. In this short guide, we will present you all the possibilities of our module.

Configuration

Before you start your work with our Password Manager For WHMCS, please move to 'Settings' tab, where you will configure access restrictions to product passwords, define email notifications and manage security settings.

Products/Services Password

First of all, decide whether you wish to allow to display of a full list of the client's products and services' login details by selecting the option: 'Client Products/Services Password'. If enabled, access details to client's products and services will be displayed in the client area → 'Password Manager'. Exclude Client Groups - enter any client group name to disable the product's access details from being displayed for clients in these groups. Exclude Clients - disable product access details for pointed here clients. Exclude Product Groups - enter any product group names, to which access details will not be shown. Exclude Products - access details for products, that are entered here, will be disabled.

Client's Private Passwords

The next section is dedicated to the management of private passwords of clients. If you wish to allow your clients to manage their personal access details, select the 'Client's Private Passwords' option. Your clients can be also permitted to set their own 'Master Password' to provide additional protection for their stored passwords. Next, move to the specific configuration: Excluded Client Groups - disabling private access details management for selected client groups here. Excluded Clients - disable management of private access details for pointed here clients. Passwords Limit Per Client - set up the limit for private access details for one client. Clients Excluded From Limit - enter clients for which the setup above limit will not be effective.

Email Notifications

This section allows you to define email notification templates that will be sent by the module on specific actions to clients and administrators. Password Change Reminder - select an email template that will be used to remind clients or administrators about the need to change the password. Password Change Notification - select an email template that will be used to notify clients and about a password being changed. Please note that you have to select templates for clients and administrators separately. If you want to disable any of the notifications, simply select 'Unassigned' from dropdown menu.

Security Settings

Under the 'Security Settings' tab, you have to define the level of access to clients' passwords for administrators and grant them extended permissions. You may grant your administrators: Full Access to clients' passwords - any administrator will be allowed to view clients' passwords. Restricted Access - only administrators with chosen roles will get access to the passwords. Shared Access - only passwords marked as 'Shared' will be visible for chosen administrator roles. You may also select the administrator groups which will be granted 'Extended Permissions'. It means that administrators from these groups will be allowed to view clients' access details when 'Visibility For Administrators:' is checked.

Other

In the very last section you may manage additional options that 'Password Manager For WHMCS ' has to offer. Client Area Integration - select to enable access to 'Password Manager' for your clients in their client area. Client Profile Integration - select this option to add the 'Passwords' tab in the client's profile in the administrator area. Support Ticket Integration - if you select this option, 'Passwords' tab will be available on the support tickets site. Random Password Character Set - define a set of characters to be used for random password generation. Random Password Length - define the length of randomly generated passwords. Do not forget to submit the changes when you finish configuring the settings.

Access Details

'Access Details' section includes a list of provided access details. Here you can create new access details and decide who can view them. Press 'Add Details' to begin.

Fill in 'Name', enter access details into 'Username' and 'Password'. You can also make your logging in easier by entering the website URL and website login URL consecutively into 'Website URL' and 'Login URL'. To leave a note associated with access details you are creating, type it into 'Additional Notes' textbox. Move to the 'Sharing' part to continue.

In this section choose 'Category' and select 'Administrators', 'Administrator Roles' and 'Clients' who should have access to this details. Note: There is disjunction relation between 'Administrators' and 'Administrator Roles'. For example, if you assign administrators X and Z and administrator role Y in which administrator X is, then all administrators assigned to group Y will see these access details together with administrator Z. Here, you may also allow clients to edit or delete these details, simply mark the 'Permissions' checkbox. 'Permissions' allows you to define clients/administrators/category members privileges. Note: If you leave the 'Clients' checkbox unmarked, your client will not see these access details even if they are chosen in the 'Clients' option. When ready, proceed to the 'Notifications' section.

Finally, you can set up notifications rules. Allow To Change Password - message is sent upon password being changed. Change Password Reminder - a notification is sent to remind about the necessity to change the password for security reasons. You can inject the passwords into each of them (depending on the selected email template). Press the 'Confirm' button to finish the process and confirm the creation of access details.

Access Details List

On the list of access details you will see some basic info, such as ID and name, username and password with the possibility to view the password (press the hidden password to make it visible). Press the "Copy" icon and the password or username will be copied to the clipboard. There is also information on the access details owner and administrator groups allowed, list of clients allowed, and category assigned.

Use action buttons to manage the entered access details. Log into your website (if URL has been provided) See access details Edit access details Delete access details

Encryption Keys

Encryption Keys are an essential security feature for protecting sensitive data. They allow for the secure encryption and decryption of access details using a public-private key pair. Your data remains encrypted and inaccessible, even in the event of unauthorized access. Click 'Add Encryption Key' to register a new key.

The following window includes these fields: Name - provide a name for the key. Public Key - enter the public key. Clients will have to provide the matching private key when deciphering passwords unless the private key is provided in the field below. Private Key - optionally, enter the matching private key. This way the private key will be stored in the database and used automatically. Secret - optionally, set an additional password for the private key. The secret can be used instead of the private key when decrypting. There are three possible configurations you can use: Public Key only - this will require the user to provide the matching private key on their own. This option is the most secure since there is only one way to decipher the password, and the private key is not stored in the database. Public Key + Private Key + Secret - the user can use a much shorter and simpler 'Secret' to decipher their password, making it much easier to access but also less secure. The private key has to be stored in the database. Public Key + Private Key - the password will be automatically deciphered on request, with no need to provide any private keys or secrets. While still more secure than not using encryption keys at all, this provides the least security out of the three options.

Edit or delete the keys using the action buttons.

Encryption keys can be attached to specific access details when you create/edit them.

When attempting to reveal the password, the client/admin will see different windows depending on how the encryption key is set up. Public Key Only (Most secure): Provide the private key to decipher the password with the module, or copy the command and decrypt the password in your terminal.

Public Key + Private Key + Secret: Provide either the private key or the secret to decipher the password with the module, or copy the command and decrypt the password in your terminal.

Public Key + Private Key (Least secure): Click on 'Confirm' to decipher the password with the private key stored in the database.

Organization

Categories

Categories allow you to prepare predefined sets of clients and administrators. By assigning a category to a password, clients and administrators from that category are granted permission to view this password. Move to 'Categories' → 'Administrator Categories' where you can add new sets, press 'Add Category' to begin.

Now, fill out the form with the category name and description. Assign desired clients and administrators to the category and press 'Confirm'.

The list of administrator categories with any details such as listed clients and administrators allowed to access the details is now visible. You may always edit the category or delete it if needed. Use the action buttons to do so.

Tags

Tags are customizable labels that allow you to organize and categorize access details. Unlike categories, tags provide a more flexible way to group and filter credentials according to specific attributes or use cases. Clients will not have access to your tags.

Tags can be added to access details when you create/edit them.

The 'Show Access Details' button will display a list of all access details with the specific tag assigned to it.

The filtered access details can be managed just as they are in the 'Access Details' tab.

The other action buttons allow you to change the tag's name or delete it.

Multiple tags can be deleted at once using the multi-select option.

If you want to delete a tag, that is still associated with an access detail, you will have to toggle the 'Force Delete' option.

Tools

Translations

Customizing language files is now extremely easy with the "Translations" tool that is now available directly in the addon. Its user-friendly design makes managing various language file tweaks a smooth and efficient process. Prepare translations for the original English files with this handy built-in tool. For specific instruction on how to use this tool please refer to its dedicated article, you will find it here.

Access Control

The 'Access Control' tool allows you to manage and restrict admin access to specific sections and features within the module. You can create rules to grant or deny access to resources, ensuring each team member has appropriate permissions. It also tracks admin activity through detailed logs, offering clear accountability. This tool is available in several WHMCS addons. For detailed instructions, refer to the dedicated article here.

Logs

The 'Logs' tool provides a structured way to track and manage module activity. It allows filtering logs by type, viewing detailed records, exporting data, and configuring automatic deletion rules. A bulk delete option is also available for easier management. For detailed instructions on using this tool, refer to its dedicated article here.

Dashboard

For fresh users, the dashboard includes a first-time configuration guide, make sure to read it if you need a reminder.

If you wish, you can hide the guide under 'Additional Actions' → 'Settings'.

A short summary of the clients' and administrators' access details and categories is available on the dashboard as well.

Administrator Area Integration

Our module integrates with your administrator area as well as the client area. Passwords of any client can be viewed on the summary page as it is shown below, but only if you enable this option in 'Settings' section in the addon. You may add new passwords directly from this site, simply press 'Add Details' and you will be moved to the 'New Access Details' form.

Your support operators are also able to access clients' passwords from within the ticket. As you may have noticed, these places allow them not only to see passwords but also to create new ones. Note: this tab is available only if the dedicated option has been enabled in the addon.

Client Area

Your clients can access client area password management page through 'Password Manager' button in navigation bar. To allow integration with the client area, a proper option must be enabled in 'Addon' → 'Settings' → 'Other'.

In 'Password Manager', your clients can view access details depending on the settings configured by the administrator and the level of access allowed for the client. Underneath you can see a client's area with full access to any option given. As you can see, there are four sections available: 'Owned Passwords', 'Shared Passwords', 'Products/Services Passwords' and 'Categories'.

Owned Passwords

If you enabled 'Client Private Passwords' your clients will be allowed to view, manage and create their own access details. Please note that 'Shared' column with information on whether the details are allowed for administrators or not is available only if you select 'Shared Access' in the addon's settings.

Preview the password and use action buttons to manage the access details: Log into URL See the details Edit the details Remove the access details

Add Access Details

To create access details, press 'Add Password' button as shown on the following screen.

Type the new password name and enter access details into 'Username' and 'Password'. You can also generate a random password. Optionally, provide 'Website URL' and 'Login URL' to be allowed to log into your site directly from the 'Password Manager' page. Leave a note if you need it.

You may now move to 'Sharing' section. There, you can decide which category the new access details will be assigned to. Choose one from the dropdown menu or select 'Unassigned' to leave it without any category. Depending on the category you select, the access details will be available for those specified in its configuration. Additionally, define which actions can be made on shared passwords. Moreover, you can specify custom email addresses to share your credentials with other customers.

Finally, in ' Notifications' section, set up conditions of delivering password notifications. Enable this option if needed and define when the reminders should be sent. You can also define whether you wish to receive the new password in the message. Do not forget to press 'Save Changes' to finish.

Additional Actions

If the administrator has enabled the 'Master Password' option in 'Client's Private Passwords' , the clients will have the ability to set additional protection for their owned passwords.

Simply provide and confirm a new password that will protect the access to owned passwords. Note - if you lose or forget this password, you will also lose access to your saved credentials in this section!

From now on, access to the 'Owned Passwords' section will require the master password.

You may change the password or disable this option at any time.

Among the additional actions you will also find a feature that allows you to export the passwords to a file. Press and the generated file will be saved on your disk.

You may also import your private passwords. Press the button and find a ready file to upload the passwords to the group of 'Owned Passwords'. You may upload files in a CSV format only.

Shared Passwords

Under 'Shared Passwords' your clients can view and manage access details that administrators shared with them, permitted to view.

Preview the password and use action buttons to manage the access details: Log into the URL if it has been provided See the details Edit the details (General/Sharing/Notifications) Remove the details Copy the password/ username to the clipboard

Product/Services Passwords

'Products/Services Passwords' section includes any access details to your client's products that they own. For convenience, clients can also assign additional passwords to selected services similarly like in 'Owned Passwords' section. Remember that as an administrator, you have to enable this option in the 'Addon' → 'Settings'→ 'Products/Services Passwords'.

Furthermore, you may export the passwords bundle into a file or, the other way round, import your passwords from a CSV file to the module.

Categories

Move to 'Categories' tab. There is a list of the created by the client categories which are used to allocate passwords for sharing. To create a new one, press the 'Add Category' button.

Fill in category name and description and press 'Add'. Created category can be seen by this client as well as administrators in the administrator area.

Clients may edit their categories, and delete and add new ones any time they wish.

Any categories created by clients will be automatically visible for administrators in the addon where you can manage them.

Tips

1. Some additional options under 'Addons' → 'Passwords Manager' → 'Settings' → 'Other' are by default enabled on the module activation. If you change any of these settings you will lose access to some of the module's functionalities.

2. Password Manager For WHMCS ensures full protection of your access details using its own security tools and WHMCS internal two-way encryption system. Note: the custom encryption key is stored in the 'configuration.php' file.

3. As this module supports a template system, any changes made in the module's template files will be saved after the upgrade process.

4. Password Manager For WHMCS module is a perfect solution for all resellers whose aim is to provide license keys to their clients in the most secure way possible.

Update Instructions

An essential guidance through the process of updating the module is offered here. Ensure successful completion of the module update by carefully following each step, thereby preventing data loss or any unforeseen issues. Additionally, you will find a current list of supplementary actions necessary for a smooth update process there.

Module Upgrade From V3.3.X to V3.4.X

Upgrading from version V3.3.X to 3.4.X requires additional steps due to the changes in the module structure. Please follow the instructions carefully to ensure a smooth transition. Optionally backup your language files and license. Delete all old module files. Upload new module files from version 3.4.X. Run the upgrade command: php -q whmcs/modules/addons/PasswordManager/cron/cron.php upgrade run "3.4.0"

Upgrade Guide

Seeking a solution that offers greater flexibility, customization tailored to your precise needs, and unrestricted availability? There is an option that not only proves to be cost-effective in the long run but also includes prioritized support services, making it a truly valuable investment. Opt for the Open Source version of your Password Manager For WHMCS module to unlock these benefits. Simply click on either the Get Source Code or Upgrade To Lifetime button found on the product's page in our client area to complete the one-step upgrade process, with a dedicated discount already applied. Follow a comprehensive guide covering the transition process, the advantages it brings, and step-by-step instructions on what to do next after the order has been successfully finalized.

Common Problems

1. When you have problems with connection, check whether your SELinux or firewall does not block ports.