WP jCryption Security
The plugin increases security of a site in case it has no SSL certificate, useful for owners of small sites who want to secure their passwords and other posted data but don’t want to buy SSL certificate for each domain and subdomain: it protects from sniffering the most important data such as passwo
About this tool.
The plugin increases security of a site in case it has no SSL certificate, useful for owners of small sites who want to secure their passwords and other posted data but don’t want to buy SSL certificate for each domain and subdomain: it protects from sniffering the most important data such as passwords when they are being sent from forms of your site to the server.
When the form served by the plugin is submitted all input data are being joined into a string, then this string is being encrypted with AES algorythm by disposable key and only encrypred string will be sent.
A browser encrypts the disposable key in javascript by the RSA public key and sends it to the server; then the server decrypts it with the RSA private key and then use it to decrypt the posted data with AES.
Translations included: Ukrainian, Russian, German and Brazilian Portuguese.
I just adapted usage in WordPress the jCryption jQuery plugin, v. 3.1.0. Please check www.jcryption.org to learn how jCryption works.
Screenshots & previews.
Getting started.
Upload wp-jcryption.zip using the wordpress plugin installation interface and activate the plugin. On the very first activation 1024-bit RSA key pair will be generated and the list of forms the plugin is primarily destinated for will be saved. You may add other form IDs to this list on the plugin settings page: Settings – WP jCryption.
Frequently asked questions.
Installation Instructions
Upload wp-jcryption.zip using the wordpress plugin installation interface and activate the plugin. On the very first activation 1024-bit RSA key pair will be generated and the list of forms the plugin is primarily destinated for will be saved. You may add other form IDs to this list on the plugin settings page: Settings – WP jCryption.
Why should I use this plugin?
If you don’t use https on your site your password could be stolen through man-in-the-middle attack when you are submitting log-in form because form data (including password) are being sent as plain text. This plugin encrypts submitted data in a way similar to https transmission.
