Title: Secure Login Collector
Author: Mike Miler
Published: <strong>10 พฤศจิกายน 2025</strong>
Last modified: 27 มกราคม 2026

---

Search plugins

![](https://ps.w.org/secure-login-collector/assets/banner-772x250.png?rev=3393213)

![](https://ps.w.org/secure-login-collector/assets/icon-256x256.png?rev=3393122)

# Secure Login Collector

 By [Mike Miler](https://profiles.wordpress.org/mikemiler/)

[Download](https://downloads.wordpress.org/plugin/secure-login-collector.2.0.7.zip)

 * [Details](https://th.wordpress.org/plugins/secure-login-collector/#description)
 * [Reviews](https://th.wordpress.org/plugins/secure-login-collector/#reviews)
 *  [Installation](https://th.wordpress.org/plugins/secure-login-collector/#installation)
 * [Development](https://th.wordpress.org/plugins/secure-login-collector/#developers)

 [Support](https://wordpress.org/support/plugin/secure-login-collector/)

## Description

**Secure Login Collector** gives agencies and freelancers a safe hand-off point 
for client credentials. Clients fill in a branded form, everything is encrypted 
before it leaves their browser, and your team only unlocks it inside WordPress. 
No more password spreadsheets, chat messages, or liability-inducing emails.

#### How a login data submission flows

 1. Client opens your credential intake page and fills in the required fields (name,
    email, service, username, password, notes (optiona)).
 2. The data is locked on their device before it is sent anywhere [browser-based Web
    Crypto + RSA-2048 key exchange + AES-256-GCM payloads].
 3. The encrypted package lands in your WP database table together with metadata for
    auditing [Zero-knowledge encryption].
 4. Your team gets notified, signs in to WordPress, and decrypts items inside the admin
    dashboard.

#### Free version features (included)

 * **Client-side sealing** – credentials are encrypted before they leave the browser,
   so email or transport leaks cannot expose them.
 * **Zero-knowledge encryption** – the server never sees the unwrapped private key;
   secrets are only readable once an admin unlocks them locally inside WordPress.
 * **WP admin decryption** – only logged-in admins with the proper capability and
   the correct password can unlock submissions inside the dashboard, keeping everything
   in one place.
 * **Submission inbox & search** – view, sort, and filter all requests with name,
   service, timestamps, and notes, then copy credentials when you need them.
 * **Instant notifications** – each submission triggers an email so projects keep
   moving without checking the dashboard every hour.
 * **Accessible client experience** – responsive form, password visibility toggle,
   optional help text, and field-level validation keep clients confident while still
   being secure.

#### Pro version extras (via Secure Login Collector Pro)

 * **Passkey-first approvals** – require Touch ID, Windows Hello, YubiKey, or password-
   manager passkeys before every decrypt/export event.
 * **Spam and bot defense** – invisible honeypot fields, nonce verification, rate
   limiting, and IP-aware hooks block automated dumps without annoying clients.
 * **Retention & cleanup controls** – choose how long data stays accessible and 
   let the plugin redact expired payloads automatically.
 * **Bulk decrypt & export** – decrypt multiple entries at once and export directly
   to Bitwarden, 1Password, LastPass, Dashlane, CSV, or JSON for team password vaults.

#### Freemius & privacy

This plugin bundles the Freemius SDK for licensing, secure payments, and (optional)
telemetry. Nothing is shared until you explicitly opt in. When you do, only environment
details (site URL, WP/PHP version, plugin version) plus contact email/locale are
sent to Freemius so upgrades and receipts work. Client submissions, encrypted payloads,
and decrypted credentials never leave your hosting environment.

#### Disclaimer

Security is a shared responsibility. We ship the tools, but you control how and 
where they are used. Install SSL, keep WordPress updated, limit admin access, and
review submissions promptly. We are not liable for any damage, data loss, or regulatory
issues that arise from using this plugin—use it at your own risk.

### External Services

This plugin bundles the Freemius SDK to handle optional telemetry, licensing, and
upgrade flows. Opt-in is required before any data is shared.

What is sent (only after opt-in):
 * Site URL, WordPress version, PHP version, and
plugin version – for compatibility checks. * Admin email and locale – so Freemius
can send license receipts and support messages if you later purchase Pro.

No client submissions, passwords, or encrypted payloads ever leave your server. 
All credential data stays inside your WordPress database.

Freemius Terms: https://freemius.com/terms/
 Freemius Privacy: https://freemius.
com/privacy/

## Screenshots

[⌊The frontend form where your client enters their sensitive login data⌉⌊The frontend
form where your client enters their sensitive login data⌉[

The frontend form where your client enters their sensitive login data

[⌊Encryption of the login data in the client’s browser before it is sent⌉⌊Encryption
of the login data in the client’s browser before it is sent⌉[

Encryption of the login data in the client’s browser before it is sent

[⌊Confirmation message that the login data was securely transmitted⌉⌊Confirmation
message that the login data was securely transmitted⌉[

Confirmation message that the login data was securely transmitted

[⌊All submitted login data listed in your WordPress backend⌉⌊All submitted login
data listed in your WordPress backend⌉[

All submitted login data listed in your WordPress backend

[⌊To view the login data, you must decrypt it with your previously set master password⌉⌊
To view the login data, you must decrypt it with your previously set master password⌉[

To view the login data, you must decrypt it with your previously set master password

[⌊Decrypted login data displayed in your dashboard⌉⌊Decrypted login data displayed
in your dashboard⌉[

Decrypted login data displayed in your dashboard

## Installation

 1. Install and activate the plugin
 2. Go to Login Data  Settings to configure notifications
 3. Register your master password for decryption of login data
 4. Create a page and add shortcode: `[seculoco_form]`
 5. Share the page link with clients

For the Pro version (separate plugin available from Freemius), register your passkey
device after installation.

## FAQ

### Why is this better than email?

Email sends passwords in plain text. This plugin encrypts data in the browser using
RSA-2048 + AES-256, and the Pro upgrade layers in automated spam filtering plus 
retention windows so nothing lingers longer than it should.

### How does spam protection work?

The Pro version bundles dynamic honeypot fields, nonce rotation, rate limiting, 
and time-based validation to keep bots out without bothering humans.

### What’s the difference between Free and Pro?

Free: zero-knowledge encryption inside WordPress with manual cleanup and notifications.
The Pro version (available as a separate plugin) adds hardware-backed approvals,
built-in spam and bot defense, retention automation, bulk exports, and white-label
controls.

### Can my team access credentials?

Yes. Any WordPress admin can decrypt in free version. The Pro version (separate 
plugin) supports multiple passkey registrations. Export to password managers for
team sharing.

### How long is data stored?

Free users manually delete entries when a project wraps. Pro users set retention
from 1-365 days so the plugin auto-redacts on schedule (most agencies use 7-30 days).

### What password managers are supported?

Bitwarden, 1Password, LastPass, Dashlane, KeePass, Chrome, Firefox, Safari, and 
CSV.

## Reviews

![](https://secure.gravatar.com/avatar/be378834416f36d99a81de0b97383294537d371bea499f4be37ac1e301551324?
s=60&d=retro&r=g)

### 󠀁[Smooth and Easy](https://wordpress.org/support/topic/smooth-and-easy-20/)󠁿

 [patririzzello](https://profiles.wordpress.org/patririzzello/) 16 พฤศจิกายน 2025

The “Secure Login Collector” is a reliable solution for safely transferring sensitive
access details.If you’re looking for a secure and efficient way to share login information,
this plugin is definitely worth installing.

 [ Read all 1 review ](https://wordpress.org/support/plugin/secure-login-collector/reviews/)

## Contributors & Developers

“Secure Login Collector” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ Mike Miler ](https://profiles.wordpress.org/mikemiler/)

[Translate “Secure Login Collector” into your language.](https://translate.wordpress.org/projects/wp-plugins/secure-login-collector)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/secure-login-collector/),
check out the [SVN repository](https://plugins.svn.wordpress.org/secure-login-collector/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/secure-login-collector/)
by [RSS](https://plugins.trac.wordpress.org/log/secure-login-collector/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 2.0.7

 * Fix error message when sending form

#### 2.0.6

 * Update Freemius SDK

#### 2.0.5

 * Fix Translations

#### 2.0.4

 * Fix translations

#### 2.0.3

 * Remove branding from frontend
 * Code quality improvements

#### 2.0.0

 * Refactoring for launch at wordpres.org

#### 1.0.0

 * Initial release with RSA-2048 + AES-256 encryption
 * Auto-deletion
 * Email notifications for new submissions

## Meta

 *  Version **2.0.7**
 *  Last updated **5 เดือน ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.2 or higher **
 *  Tested up to **6.8.5**
 *  PHP version ** 7.4 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/secure-login-collector/)
 * Tags
 * [data security](https://th.wordpress.org/plugins/tags/data-security/)[login](https://th.wordpress.org/plugins/tags/login/)
   [password](https://th.wordpress.org/plugins/tags/password/)
 *  [Advanced View](https://th.wordpress.org/plugins/secure-login-collector/advanced/)

## Ratings

 5 out of 5 stars.

 *  [  1 5-star review     ](https://wordpress.org/support/plugin/secure-login-collector/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/secure-login-collector/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/secure-login-collector/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/secure-login-collector/reviews/?filter=2)
 *  [  0 1-star reviews     ](https://wordpress.org/support/plugin/secure-login-collector/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/secure-login-collector/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/secure-login-collector/reviews/)

## Contributors

 *   [ Mike Miler ](https://profiles.wordpress.org/mikemiler/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/secure-login-collector/)