NewJenk

<p>When you’re doing things that are confidential, or private, or personal, then they should remain so.</p>
<p>Encrypted Post Type adds an encrypted <a href="https://wordpress.org/support/article/post-types/#custom-post-types" rel="ugc">post type</a> where the content of posts is encrypted using <a href="https://www.openssl.org/" rel="nofollow ugc">OpenSSL</a>. Use it to write notes, keep a diary, draft letters, plan your next career move, even project manage – basically anything important that you want to keep private, Encrypted Post Type is the place to put it.</p>
<p>Coming complete with an advanced but simple tagging system you can easily organise your posts to create a powerful tool that works just the way you need it to, and can replace other tools like Roam, Workflowy, OneNote, Evernote, and more.</p>
<h3>Features of this plugin</h3>
<ul>
<li>Easily tag your posts to organise them and build relationships between things you’re working on. Never used tags before? Here’s a handy <a href="https://encryptedposttype.com/kb/beginners-guide-to-tags/" rel="nofollow ugc">guide on using tags</a>.</li>
<li>Works with all core Gutenberg blocks and should work with most custom blocks that aren’t doing anything too funky with the markup.</li>
<li>Collaboration out of the box: multiple users can view and edit posts, with encryption/decryption happening seamlessly in the background (the <a href="https://encryptedposttype.com/pro/" rel="nofollow ugc">Pro version</a> allows individual posts, viewable only to the author).</li>
<li>Choose a name for the post type. By default it’s set to ‘Notes’ but you can name it anything you like, and even set an icon in the sidebar! <a href="https://encryptedposttype.com/kb/naming-your-post-type/" rel="nofollow ugc">Read more about naming the post type here</a>.</li>
<li>It’s been tested with content over 20,000 words in length and worked an absolute champ!</li>
<li>Posts display in order of most recently edited on the ‘All Posts’ screen; this is a great way to quickly see what you’re working on right now. You can re-order by created date, title, and you can change last updated to ascending (oldest first).</li>
<li>Revisions work! Content is decrypted on the fly so you can see the differences between versions.</li>
<li>The free version has 1 way of storing the encryption keys, but the <a href="https://encryptedposttype.com/pro/" rel="nofollow ugc">Pro version</a> beefs up security significantly by introducing an innovation called <a href="https://encryptedposttype.com/kb/rest-key-management-rkm/" rel="nofollow ugc">Rest Key Management (RKM)</a>.</li>
<li>You can easily add links via the link pop-up of the paragraph and heading block to other posts, and when you click on one of the links you’ll go straight to the post!</li>
<li>The block editor (Gutenberg) also includes word, character, paragraph, and heading counts, so you can easily keep track on the progress of what you’re writing all within the block editor without having to rely on additional tools. <a href="https://github.com/WordPress/gutenberg/pull/41611" rel="nofollow ugc">Reading length</a> will be added in a future version of the block editor, which will come in really handy for drafting documents.</li>
</ul>
<p>Want a feature added? You can <a href="https://us1.onform.net/encryptedposttype/request-a-feature/" rel="nofollow ugc">request a new feature here</a>.</p>
<h3>How does it work?</h3>
<p>The block editor (Gutenberg) saves data in post_content as html markup – it’s this that is encrypted.</p>
<p>When the plugin is installed and activated a key is randomly generated that is saved in the options table of your site. This key is <strong>not</strong> used to encrypt content of posts – we’ll come back to it in a second. A directory is also created in the uploads directory that is used to store the encryption keys – the keys in this directory are used to encrypt data, but before they are saved in the directory they are encrypted with the key that was saved in the options table (with the Pro version the keys are saved on a different site for added security). So, the encryption keys are themselves encrypted.</p>
<p>When you create a new post the encryption key for that post is saved in the directory mentioned above (but remember, it’s encrypted before being saved) along with something called an Initialisation Vector (IV), which ensures the encrypted output (ciphertext) is unique.</p>
<p>When you save your post the key that was saved in the directory when the post was initially created is first decrypted using [a] the key saved in the options table, and [b] the Initialisation Vector (IV) that was saved alongside the key; the decrypted key is then used to encrypt the content and an IV is also saved alongside the post. The IV is updated each time the post is saved to ensure the encrypted output (ciphertext) is unique.</p>
<p>Encryption is done using <a href="https://en.wikipedia.org/wiki/Advanced_Encryption_Standard" rel="nofollow ugc">aes128</a> and the <a href="https://www.php.net/manual/en/book.openssl.php" rel="nofollow ugc">OpenSSL library</a>.</p>
<h4>Important considerations</h4>
<ul>
<li>Media that you upload to your site is not encrypted. If you want this feature <a href="https://us1.onform.net/encryptedposttype/request-a-feature/" rel="nofollow ugc">request it here</a>.</li>
<li>If you delete your encryption keys and you don’t have a backup there’s no way of getting your data back. It will be gone for good.</li>
<li>Reusable blocks are not encrypted. If you want this feature <a href="https://us1.onform.net/encryptedposttype/request-a-feature/" rel="nofollow ugc">request it here</a>.</li>
<li>Each post has its own encryption key that will be saved in a file (or via <a href="https://encryptedposttype.com/kb/rest-key-management-rkm/" rel="nofollow ugc">RKM</a>). These files are very small (approx 255 bytes), which means 3,900 will take up approximately 1MB, and 3,900,000 will take up approximately 1GB of server space. It’s safe to say you’ll have to create lots and lots and lots of posts before space becomes an issue.</li>
<li>Encryption should be part of a broader security strategy. There are a few simple things you can do to help protect your data in addition to using Encrypted Post Type: [1] use a strong password, [2] use 2-factor authentication, [3] minimise the number of plugins you use, and only use plugins from reputable sources, [4] keep WordPress up-to-date, including your theme/s and plugins.</li>
<li>Encryption happens server-side. End-to-end encryption was considered but there are limitations to end-to-end encryption that make it impractical in many applications. There are plenty of legitimate use cases where server-side encryption makes more sense. For example, there are several potential features in the pipe-line like reminders and mentions that would be very very difficult to pull off with end-to-end encryption.</li>
<li>Encryption is complex, and Encrypted Post Type aims to bring encryption to WordPress in a way that is accessible to all. As with all software, there may be bugs present. The plugin is open source and if you spot a bug please feel free to contribute over on Github here: <a href="https://github.com/NewJenk/EPT/" rel="nofollow ugc">github.com/NewJenk/EPT</a>, pull requests are welcome.</li>
</ul>
<h3>Why WordPress, the block editor (Gutenberg), and Encrypted Post Type make a great combo</h3>
<ul>
<li>The block editor is flexible; whether you need easy access to tags when you’re writing (they display in the sidebar), or if you want a screen free of distractions to do your best work, the block editor can do it with ease. And combined with Encrypted Post Type, you can confidently maximise the true potential of the block editor safe in the knowledge that your data is secure.</li>
<li>WordPress is very mature and works great for managing lots of content – tags have been part of WordPress since 2008!</li>
<li>The details pop-up (the i icon in the block editor toolbar) includes super useful information perfect for note taking, drafting documents and more!</li>
<li>The block editor comes with some really smart keyboard shortcuts that can boost productivity. For example, highlight text and use CTRL+K (CMD+K on Mac) to add a link, or use CTRL+S (CMD+S on Mac) to save your work.</li>
</ul>
<p>The WordPress block editor (also called Gutenberg) is an excellent writing tool. It’s better than Microsoft Word at word processing (although that probably says more about Word), and is also a formidable website page builder (albeit a significant departure from WordPress of old). And it is so powerful, and has so much potential, that it could conceivably become the de-facto editor of the internet. It makes an excellent tool for taking notes, writing documents, and building web pages. And it has another trick up its sleeve that lends itself very well to encryption. Because of the need for Gutenberg to be backwards compatible with the rest of WordPress, the output of Gutenberg is simple html markup. Because the markup Gutenberg generates is so simple, almost all Gutenberg blocks are compatible with encryption.</p>
<h3>Pro version</h3>
<p>If you want to make your content even more secure you can upgrade to the Pro version that includes an innovative way to manage your encryption keys called <a href="https://encryptedposttype.com/kb/rest-key-management-rkm/" rel="nofollow ugc">REST Key Management (RKM)</a>. RKM stores your encryption keys on a separate WordPress site that you control, meaning that both the site where your encrypted content is stored AND the site where your keys are stored would have to be compromised for your data to be at risk – and it would have to be a very bad day for that to happen.</p>
<p>Included with Pro:</p>
<ul>
<li>Rest Key Management (RKM) – offers a significant security boost!</li>
<li>Archive Posts – don’t want a post to show up in ‘All Posts’? Mark it as archived and it’ll only be viewable in a special ‘Archive’ mode.</li>
<li>Individual Posts – only the author of an individual post can view and edit it.</li>
<li>Hide the front-end of your site – only use your WP site to write notes, or draft documents? Easily hide the front-end.</li>
<li>Premium email support.</li>
</ul>
<p><a href="https://us1.onform.net/encryptedposttype/waitlist/" rel="nofollow ugc">PRO VERSION COMING SOON – get on the waitlist*</a></p>
<p>*Your email will only be used to let you know when the Pro version is available.</p>
<h3>Request a feature</h3>
<p>The core plugin is available for anyone to contribute to on Github here: <a href="https://github.com/NewJenk/EPT/" rel="nofollow ugc">github.com/NewJenk/EPT</a>, pull requests are welcome. In addition, you can <a href="https://us1.onform.net/encryptedposttype/request-a-feature/" rel="nofollow ugc">request a feature by filling in the form here</a>.</p>
<h3>Compatibility with other plugins</h3>
<p>Developer-friendly plugins can be extended to encrypt/decrypt content. Here are examples of how content can be encrypted and decrypted:</p>
<h4>Encrypting content</h4>
<p>See the method <code>en_p_t_encrypt_the_post</code> in encrypted-post-type.php for an example of how to encrypt content.</p>
<h4>Decrypting content</h4>
<p>See the example here: <a href="https://encryptedposttype.com/kb/about#decrypting-content" rel="nofollow ugc">https://encryptedposttype.com/kb/about#decrypting-content</a></p>


Encrypted Post Type

Encrypted Post Type provides a custom post type where the content of each post is encrypted.

tynor

Chris Teitzel

<h4>API & ENCRYPTION KEY MANAGEMENT FOR WORDPRESS</h4>
<p>Lockr is the first hosted secrets management solution for WordPress, providing an affordable solution for all sites to properly manage site secrets such as API and encryption keys used by their plugins. Lockr’s offsite key management solution protects against critical vulnerabilities, delivers best-practice security to help sites comply with many industry regulations, and provides a Defense in Depth approach to securing your data. Lockr also provides AES-256 encryption to your custom plugins in a seamless manner to protect data at rest in your site. And best of all, even though it delivers enterprise-grade key management, you can try it for 2 weeks free! Learn more at http://www.lockr.io.</p>
<h4>Lockr Features:</h4>
<ul>
<li>Easy to configure and setup in WordPress</li>
<li>Simple UI to override any option stored by plugins</li>
<li>Safe and Secure offsite key storage</li>
<li>Works with any API and encryption key</li>
<li>Built-in AES-256 Encryption functions to secure data in your site</li>
<li>99.9% uptime guarantee (SLA Available for Enterprise Customers)</li>
<li>Regular Backups</li>
<li>Multiple Region Redundancy</li>
<li>Backed by Townsend Security’s FIPS 140-2 compliant key manager, your keys are secured to industry standards.</li>
</ul>
<h4>Lockr is the first key management service for WordPress.</h4>
<p>More and more plugins are leveraging 3rd party APIs. To securely access these APIs, a token, secret key, or password is necessary. Until now, these highly sensitive secrets were stored right in your database. We’ve seen a major need to secure sensitive data and communications by removing these API keys from your database, encrypting them, and storing safely in an offsite key vault. This limits the damage that could be done if your site is compromised or a developer has a local copy of your database. Lockr makes key management easy. Just install the plugin for WordPress, configure your account and begin securely storing your keys. Lockr provides patches for the major plugins used by hundreds of thousands of sites and with WP-CLI a single command will make sure your plugins use Lockr.</p>
<h4>Who is Lockr for?</h4>
<p>Lockr is available for WordPress sites of all sizes. Easy to use for the novice site owner and advanced enough for the expert developer, Lockr secures web transactions and data at rest by protecting API and encryption keys.<br />
For Site Builders: fill out a single registration form and you’re set. To use with other plugins, look for those that have Lockr available or use our patch library to update your favorite plugin to use Lockr.<br />
For Developers: Lockr provides an easy to use framework to “get and set” keys from your custom plugin. Additionally, Lockr provides a simple to use yet strong AES-256 encryption function, ensuring your data is encrypted according to industry best-practices and securely stored. Using Lockr helps keep the developer safe, by removing the sensitive passwords and key secrets from the code and database, following security best practices should a site be compromised.</p>
<h4>Is Lockr Safe?</h4>
<p>Lockr can secure any API key, secret key, and other types of credentials. Once enabled in WordPress, keys entered are encrypted, then sent over to the Lockr system and removed from the code repository and database. This encryption teamed with hosting provider based authentication prevents your key from being used outside your website. Lockr also manages keys on a “per environment” basis which helps eliminate the potential of keys being shared from production to development environments. No longer will you have to worry about sending a notification from development to your production users, or having production data decrypted in development environments.</p>
<p>Leveraging proven enterprise-grade key management technology from Townsend Security, Lockr’s offsite key management delivers best-practice security to protect against critical vulnerabilities and help sites meet PCI DSS, HIPAA and other security requirements and regulations.</p>
<p>This plugin is designed, written and maintained by experts in security, to the end user it is easy to use and understand. Let Lockr handle the difficult part of securing your site, so you can focus on delivering the best experience possible to your users.</p>


Lockr

Lockr is the first API & Encryption key management service for WordPress, providing an affordable solution to secure secrets used by plugins.

Encrypted Post Type vs Lockr