Supportcandy Private Credentials

SupportCandy Private Credentials is a security-focused extension designed specifically for technical support teams, web developers, hosting providers, and WordPress plugin/theme developers using the SupportCandy helpdesk plugin. In technical customer support workflows, agents frequently require staging site logins, FTP credentials, database details, or API keys to diagnose customer issues. Sending this information via plain text comments or email creates severe security vulnerabilities. SupportCandy Private Credentials solves this by adding a dedicated, encrypted form area within support tickets. Submitted credential fields are encrypted in the WordPress database, masked on-screen, accessible strictly to authorized agents working on the ticket, and can be automatically purged upon ticket resolution to maintain maximum compliance and privacy.

Main Features

• AES database encryption — Encrypts sensitive credential values before saving them to the WordPress database to protect against data leaks.
• Masked credential UI — Displays sensitive values with click-to-reveal toggle buttons so passwords and secret keys remain hidden during screen sharing or casual viewing.
• Auto-purge on ticket closure — Automatically wipes stored credentials from the database when a ticket status changes to Closed or Resolved.
• Granular field builder — Create custom credential input fields (e.g., WordPress Admin URL, Username, Password, FTP Host, SSH Key, License Keys) for specific ticket categories.
• Role-based decrypt permissions — Restrict access to view or reveal decrypted credential data strictly to assigned support agents, team leaders, or site administrators.
• Access audit logging — Logs which agent viewed, copied, or purged credential details to maintain full accountability.
• One-click copy to clipboard — Provides quick copy buttons for agents to streamline logging into client environments efficiently.
• Customer self-service purge — Allows ticket creators to manually erase their sensitive credentials at any time without waiting for ticket closure.

Benefits

• Ensures GDPR & data security compliance — Prevents plain-text passwords and server logins from sitting exposed in unencrypted ticket threads or email notifications.
• Builds customer trust — Reassures clients that their sensitive server details and admin logins are handled with enterprise-grade security.
• Speeds up technical troubleshooting — Eliminates back-and-forth emails requesting missing logins by collecting required staging credentials upfront.
• Reduces long-term liability — Automated credential purging ensures your database does not retain unnecessary client server passwords post-resolution.
• Seamless helpdesk workflow integration — Embeds naturally inside the existing SupportCandy ticket interface without requiring external password-sharing micro-SaaS subscriptions.

Who is it suitable for?

• WordPress plugin & theme developers collecting staging admin logins to debug client site issues safely.
• Web hosting providers & systems administrators receiving root SSH, FTP, or cPanel access details from customers.
• Digital agencies & IT consultants managing client sites and requiring secure, temporary access credentials.
• SaaS support teams & API integration services receiving customer API tokens and webhooks configuration keys.