Description
BASIC License Key Seller turns downloadable WooCommerce products into licensed WordPress plugin sales.
- Automatically generates a unique license key when an order is paid.
- Supports one-site, three-site, and unlimited activation limits.
- Provides HTTPS REST endpoints for activation, validation, and deactivation.
- Adds license keys to customer order emails.
- Adds a Licenses section under WooCommerce My Account.
- Protects downloads with WooCommerce permissions and current license status.
- Encrypts license keys at rest and stores lookup credentials as keyed hashes.
- Works with Stripe, PayPal, and other gateways that mark WooCommerce orders paid.
The free plugin does not require registration, a Blockrush account, or an external service. An optional, separately distributed Pro plugin adds subscription lifecycle handling, reporting, and administrative license controls. Pro implementation is not included in this WordPress.org package.
Learn more and compare editions at https://blockrush.app/product/basic-license-key-seller-pro/
Privacy
This plugin does not contact Blockrush or any other external service. It stores license keys, customer user IDs and email addresses, WooCommerce order and product IDs, license status and expiry, and activated site URLs in the site’s WordPress database. Uninstalling retains this data by default to prevent accidental loss; the included documentation explains the opt-in deletion constant. Payment processing remains the responsibility of WooCommerce and the selected gateway.
Security
License keys are generated from cryptographically secure random data and encrypted at rest using Sodium or OpenSSL authenticated encryption. A dedicated random plugin secret is generated during activation, stored as a non-autoloaded option, and used to derive separate encryption, lookup, installation, and rate-limiting keys. Advanced installations may define a stable BLKS_CRYPTO_SECRET value of at least 32 unpredictable characters in wp-config.php before activation. API calls require HTTPS and are rate limited. Customer and administrator actions use WordPress permissions and nonces.
Support
Use the support forum on this plugin’s WordPress.org page. Do not post license keys or customer information publicly.
Installation
- Install and activate WooCommerce.
- Upload and activate BASIC License Key Seller.
- Edit a WooCommerce product.
- Under Product Data General, enable Issue License Keys and choose the activation limit.
- Mark the product Downloadable and attach the customer plugin ZIP.
- Require or create customer accounts at checkout if customers need My Account license management.
- Complete a test order and confirm the license appears in the email and My Account Licenses.
FAQ
-
Does the free plugin require a license key?
-
No. The WordPress.org edition is fully functional and does not contact Blockrush.
-
Does it work with Stripe?
-
Yes. It works with Stripe and other WooCommerce gateways when they correctly mark an order paid or completed. This plugin does not store payment credentials.
-
What is included in Pro?
-
Pro is a separately installed commercial plugin offering WooCommerce Subscriptions lifecycle handling, dashboard statistics, and administrator suspension and reactivation controls. None of that implementation is included in this WordPress.org package.
-
Does the free edition manage subscription renewals?
-
No. Subscription lifecycle handling is a Pro feature. The free edition is intended for one-time WooCommerce purchases.
-
Where are the API endpoints?
-
Send JSON POST requests to
/wp-json/lks/v1/activate,/wp-json/lks/v1/validate, and/wp-json/lks/v1/deactivate. HTTPS is required.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“BASIC License Key Seller” is open source software. The following people have contributed to this plugin.
Contributors
Translate “BASIC License Key Seller” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.1.1
- Remove all subscription lifecycle, dashboard statistics, and administrator status-control implementation from the Standard package.
- Keep Pro functionality exclusively in the separately distributed Pro plugin.
- Add automated release checks that reject Pro-only implementation in the Standard ZIP.
1.1.0
- Add one-site, three-site, and unlimited activation limits to Standard.
- Replace WordPress authentication-salt derivation with a dedicated non-autoloaded plugin secret and purpose-specific keys.
- Document the optional
BLKS_CRYPTO_SECRETconstant and opt-in uninstall deletion behavior.
1.0.6
- Complete the final WordPress.org submission review and readme validation.
- Document stored customer and activation data and default retention behavior.
- Report customer deactivation storage failures instead of showing false success.
1.0.5
- Pass legacy-cipher LIKE patterns through prepared replacement parameters.
1.0.4
- Resolve WordPress Plugin Check internationalization and input-handling findings.
- Prepare custom-table identifiers with WordPress
%iplaceholders. - Document narrowly scoped direct-database exceptions required for transactional license records.
- Remove translation loading that WordPress.org now handles automatically.
1.0.3
- Bound public license API request bodies and encrypted values.
- Verify activation transaction and deactivation database results.
- Strengthen no-cache directives on credential-bearing responses.
1.0.2
- Add a Pro feature comparison on the plugin’s own administration page.
- Keep the upgrade information free of tracking, remote assets, and site-wide notices.
1.0.1
- Complete a fresh security review and submission-package verification.
1.0.0
- Initial WordPress.org-ready release.
- Automatic WooCommerce licenses.
- Activation, validation, and deactivation API.
- Protected downloads and My Account license management.