XeroWP
B

BASIC License Key Seller

0/5 (0 ratings) — active installs Updated Aug 25, 2026
downloadslicense keyssoftwarewoocommercewordpress plugins
Download v1.1.1

BASIC License Key Seller turns downloadable WooCommerce products into licensed WordPress plugin sales.

  • Automatically generates a unique license key when an order is paid.
  • Supports one-site, three-site, and unlimited activation limits.
  • Provides HTTPS REST endpoints for activation, validation, and deactivation.
  • Adds license keys to customer order emails.
  • Adds a Licenses section under WooCommerce My Account.
  • Protects downloads with WooCommerce permissions and current license status.
  • Encrypts license keys at rest and stores lookup credentials as keyed hashes.
  • Works with Stripe, PayPal, and other gateways that mark WooCommerce orders paid.

The free plugin does not require registration, a Blockrush account, or an external service. An optional, separately distributed Pro plugin adds subscription lifecycle handling, reporting, and administrative license controls. Pro implementation is not included in this WordPress.org package.

Learn more and compare editions at https://blockrush.app/product/basic-license-key-seller-pro/

Privacy

This plugin does not contact Blockrush or any other external service. It stores license keys, customer user IDs and email addresses, WooCommerce order and product IDs, license status and expiry, and activated site URLs in the site’s WordPress database. Uninstalling retains this data by default to prevent accidental loss; the included documentation explains the opt-in deletion constant. Payment processing remains the responsibility of WooCommerce and the selected gateway.

Security

License keys are generated from cryptographically secure random data and encrypted at rest using Sodium or OpenSSL authenticated encryption. A dedicated random plugin secret is generated during activation, stored as a non-autoloaded option, and used to derive separate encryption, lookup, installation, and rate-limiting keys. Advanced installations may define a stable BLKS_CRYPTO_SECRET value of at least 32 unpredictable characters in wp-config.php before activation. API calls require HTTPS and are rate limited. Customer and administrator actions use WordPress permissions and nonces.

Support

Use the support forum on this plugin’s WordPress.org page. Do not post license keys or customer information publicly.