Stop image theft on your WordPress site. aFFirmFirst Cloud Library connects WordPress to your aFFirmFirst secure image vault. Your originals are never stored in WordPress and never exposed in the page source. Instead, images are streamed on demand from the aFFirmFirst cloud and painted to an HTML canvas, so they can’t be right-clicked, dragged, downloaded, hot-linked, or scraped by bots.

It works exactly like the WordPress images you already know — Featured Images, galleries, the block editor, the Classic Editor, and WooCommerce products — but every image is protected automatically.

Why protect images this way?

No <img src> to copy — images render on a canvas, so there is no file URL to steal
Encrypted, one-time, short-lived delivery from the cloud (AES-256)
Right-click, drag-and-drop, and keyboard-save are blocked
Forensic and visible watermarking deter and trace unauthorized use
Domain locking — your images only render on the sites you authorize

Rendering Modes

SDK Canvas (default) — Maximum protection with client-side decryption and canvas rendering
Iframe Embed — High protection in a sandboxed iframe with the full SDK feature set
Signed URL — Direct signed image URL (shortcode override only; for email/RSS compatibility)

Key Features

Vault browser in the editor — Browse and insert your secure vault images without leaving WordPress
Upload to vault — Send images from WordPress straight into your encrypted vault
Featured Images — Set any protected vault image as a post or page featured image
Gutenberg blocks — A single “Protected Image” block and a “Protected Gallery” block with grid, masonry, slider, and justified layouts, plus lightbox and captions
Classic Editor support — A TinyMCE toolbar button to insert vault images in the classic editor
Image Scanner — Scan your existing posts, pages, and products for unprotected images, then bulk-upload and auto-replace them with protected versions
WooCommerce support — Protected product images and product galleries
[affirm_protect] shortcode — Manual insertion anywhere, with a per-image rendering mode override
SEO & social ready — Automatic signed og:image and Twitter Card URLs so previews still work for search engines and social crawlers
One-key setup — Connect securely with a single API key. No URLs or servers to configure

Usage

Featured Image: Open the Featured Image panel and choose “Set aFFirmFirst image” to pick a protected image from your vault.

Upload: Use the aFFirmFirst admin screen to upload new images directly to your secure vault.

Blocks: In the block editor, add the Protected Image block for a single image or the Protected Gallery block for multiple images. Galleries support grid, masonry, slider, and justified layouts with optional lightbox and captions.

Classic Editor: Use the aFFirmFirst button in the TinyMCE toolbar to insert a vault image.

Image Scanner: Open the aFFirmFirst > Scanner screen to find unprotected <img> tags in your existing content, then bulk-upload them to your vault and automatically replace them with protected versions.

Shortcode:
[affirm_protect id=”YOUR_IMAGE_ID” width=”800″ height=”600″]
[affirm_protect id=”YOUR_IMAGE_ID” mode=”iframe”]

Rendering Modes:
* sdk — Canvas-based (default, maximum protection)
* iframe — Sandboxed iframe (high protection)
* signed_url — Direct signed image URL (shortcode override only; for email/RSS compatibility)

External Services

This plugin relies on the aFFirmFirst service to store, process, and securely deliver your images. It will not function without an aFFirmFirst account and API key.

Frontend API (https://affirmfirst.com) — connection validation, image listing, signed-URL generation, and uploads via /api/plugin/*.
Secure delivery CDN (https://cdn.secured.affirmfirst.com) — SDK script, encrypted image streaming, and signed image delivery.

Data transmitted: your API key (for authentication) and any images you choose to upload. No data is sent until you enter an API key and use the plugin.