Advanced security with features you’ll love! Works with all payment gateways!* This is the flexible encryption plugin you’ve needed and been waiting for! Don’t settle for anything less when it comes to your data security!
See Full Feature List Below!
If you collect personal data, private data or sensitive data using your Gravity Forms installation, (name, address, phone, email, birthdate, SSN ect..) and/or are working on GDPR compliance you should use this plugin to protect that customer information and give yourself some peace of mind concerning database breaches and admin user misuse of any collected data. ˚˚
Gravity Forms Encrypted Fields works seamlessly within Gravity Forms to give you the data security and data privacy you need, as well as the custom control to implement it quickly and smartly within your WordPress installations needs! There’s no need to encrypt everything you collect and give everyone access in admin. Only encrypt the specific fields you want, and optionally give individual field or global access to only the individual users and/or roles that need it! Many additional features give you control over your collected data in a variety of ways.
Use this plugin to help meet GDPR and/or secure data at rest in the database and keep back end users from accessing it through admin, or just use it to hide form field results in admin from back end users without even turning encryption on. You can use either option on different fields of your choosing with field specific user view permissions all at the same time!
Just set up the encryption, user permissions, custom merge tags, and other options as needed and then continue to use Gravity Forms as normal without any need for any extra steps to view or export encrypted data after setup. For users with view permissions to field data the decryption and view access is completely transparent, lightning fast, seamlessly integrated, and automatic. They likely won’t even know encryption is on. Operation is the same as normal by just logging in and viewing or exporting readable data since they have permission. The plugin retains normal Gravity Forms functionality like viewing entries and all export options. There is also reliable native entry search functionality based on any encrypted fields data with individual user/role permissions to use this functionality (search must be for exact content and not partial content).
Users without field view permission only see a customizable restricted display message for either encrypted data or hidden data depending on the data type. Users without view permission to a field cannot search based on the hidden value of the field at all, export it as readable, or perform other operations which would reveal the value of fields they do not have access to. Existing non-encrypted field data also is hidden in admin for users without permissions when encryption or “hide field value” is later turned on for a field. The separate restricted displays for encrypted vs hidden data can let users without permissions know what individual field data is actually encrypted vs. just being hidden. The restricted displays are fully customizable and can be set to be the same for both or to simply show nothing if desired. If showing nothing the users without permission would not even know if any data has been entered into an encrypted or hidden field as no field data would ever be returned for that field in the admin interfaces for them.
Numbered step by step simple setup instructions can have you up and running in a few minutes with simple seamless encryption of saved form data and automatic decryption when you access your data for a basic site, or you can optionally utilize the many additional options to create complex individual field data permissions for multiple users and use cases to manage your data view permissions at the both the user/role and individual field levels. Global view permissions can also be assigned to quickly lockout all users and give individual users and/or roles global view permissions to all data.
Cant I just use a free plugin like Gravitate?
We’ve included this here only because of the amount of inquiries and the obscurity of the information we believe people are missing when considering those options. Please understand that the out of date free plugins out there simply force you to encrypt everything whether you want to or not, have no user view permission or output controls or additional web security measures, and give all admin users access, and then store the key right next to the encrypted data in the database. Unfortunately, that’s the same as locking your front door and leaving the key in it. The data is encrypted, but it is able to be easily decrypted by anybody who gets it anyway ..which defeats the entire purpose of using encryption. They also do not work with other Gravity Forms payment gateways like Paypal and Stripe and other various extensions (like the “user registration” add-on) and operations because they have to encrypt everything submitted which doesn’t play nice when those product and pricing fields need to be processed by another plugin or add-on. So if you find you need or want to add or use any other Gravity Forms functionality, you likely cannot do it using those plugins. They cannot encrypt old gravity forms entry data, or remove encryption for you either, and do not have any of the many other incredibly useful and/or necessary features this plugin offers ..for one small example: the ability to search entries based on encrypted data. We do understand that “free encryption plugin” sounds convenient, but when it comes to real data protection and your sites compatibility and operational needs we believe that when you have the information to compare and realize the value of the real security, flexibly useful features, thoughtful solutions, and extensive documentation and support that Gravity Forms Encrypted Fields offers, you’ll know why it’s the right choice for any site!
PLUGIN FEATURES
– AES-256 bank/military grade database storage encryption
– Selectable encryption types including OpenSSL
– Built in web and WordPress Admin security measures to help prevent sensitive data breaches
– Smart encryption key system with separately generated and stored customizable encryption keys
– Option to globally bypass actual encryption and just hide data in admin from unauthorized users.
– Advanced user/role view permissions for encrypted or hidden data per individual field
– Global user/role view permissions for encrypted or hidden data
– Select to encrypt or hide Gravity Forms individual field data with both user and role access control per individual field.
– Merge tag filtering and exclusion controls to control output on confirmations and notifications of encrypted or hidden fields
– Ability to include html and section break fields in “all_fields” merge tag output.
– Ability to exclude specific fields from “all_fields” merge tag output.
– Custom decrypted merge tags to output human readable versions of encrypted data only in email and confirmations while retaining any view permissions on the site.
– Custom encrypted merge tags for developers to output encrypted versions of field data only in email and confirmations while retaining any normal encryption or not on the site. Developers can then create custom decryption on their own for the receiving end of the encrypted data.
– Custom user/role view permissions checking merge tags which output human readable versions of encrypted data only if the user/role loading or generating the merge tag content has view permissions to the field data on the site. Any fields the user does not have permissions to will show the restricted display.
– Ability to pass full encrypted strings to merge tag output on confirmations and notifications for developers to pass data encrypted through email notifications for third party developed decryption and ingest into other systems.
– Fully functioning native search functionality of entries based on encrypted field data with user/role based permission to this type of search. (Can only search natively for exact field values. ..this includes any specific value of multi part field such as first name or last name.)
– Custom output preview masking for hidden/encrypted fields to use for entry view, and optionally also in merge tags for confirmations and notifications. example: •••1234
– Ability to auto remove/not store the users IP address on all entries from specific forms on submission
– Ability to auto delete specified individual field data from form entries after submission/user registration/notifications/feeds. Keep the site clean and no sensitive/private data to breach!
– Ability to delay encryption on specified individual fields until after submission/user registration/notifications/feeds processing. This allows data to be processed by feeds and add-ons unencrypted during initial submission or update normally and then encrypts immediately afterwards for database storage!
– Ability to auto delete specified form entries and file uploads after submission/user registration/notifications/feeds. Keep the site clean and no site data to breach!
– Ability to auto delete only specified form file uploads after submission/user registration/notifications/feeds. The file upload can be attached to the notification email and sent out prior to deletion. Keep the site clean and no site file upload data to breach! Great for resumes or other files uploaded with potentially sensitive data!
– Ability to attach specified forms file uploads to specified notifications after submission/user registration before entry or file uploads are deleted.
– Option to password protect access to admin settings page (This password is encrypted and when combined with quick global permission lockout, can allow for data security even in the event of an admin login breach! Just unlock the page and give temporary permission when you need to access encrypted data!
– Option to give the original logged in submitting user view permissions to individual field data in addition to the regular user/role view permissions set for their own submitted entries.
– Option to assign ‘User Owned Fields’ which encrypt data and give view permission to only the original submitting user
– Option to display custom text or nothing at all for hidden and encrypted fields for users without permission
– Ability to remove/reverse encryption on specified forms, entries, and fields. This can also be run in batches on all entries and or fields of a specified form from newest to last entries to completely remove ALL encryption from forms entries!
– Ability to add encryption to previous entries for specified forms, entries, and fields (fields must be of supported type). This can also be run in batches on all entries and or fields of a specified form from newest to last entries to completely encrypt ALL of a forms entries! Now you can add encryption on old field data!
– Ability to turn on/off encryption or hide field value for for all supported field types on a form globally!
– Hide quiz choices/answers from users without view permission in admin, by hiding field value for quiz fields!
– Works with Gravity Forms “Partial Entries” add-on to encrypt partial entry data as is is being entered and stored as well!
– Detailed and extensive inline documentation for every option and setting to help you set up the perfect solution for your site!
Full setup instructions are directly inside the options page for users who just want to be up and running in a couple minutes, and the plugin also has a complete visual system check system and encryption testing to help users visibly see the systems requirements and current encryption status to be up and running quickly, and know what global settings it is using at a glance.
Supported Field Types: single line text, paragraph text, drop down, multi select, number, checkboxes, radio buttons, name, date, email, phone, address, website, list, quiz (users choices/answers are not marked while viewing entry without view permission).
*Payment / Product / User Registration information generally can NOT, and/or should NOT be encrypted to maintain functionality. (Some form setups are possible to both process data unencrypted and then store it encrypted.)
˚˚ This plugin fills one necessary component of data protection. The usage of other basic protections such as SSL, VPS, User capability restrictions, and strong admin user password enforcement alongside this plugin are strongly recommended. You may be subject to implementing additional data protection policies and procedures depending on the sensitivity level and type of the information you are collecting.
NOTICE:
This plugin is currently only authorized, supported, and legitimately sold through codecanyon.net. Do not compromise your sites security by unauthorized installs of this or any other plugin.
Gravity Forms Encrypted Fields © 2016 Plugin Owl.
Please see support page for plugin F.A.Q
Item is supported though the comments page
Requirements:
+ means “or any higher version”
-WordPress 4.6+
-PHP 5.6+ (5.5 and 5.4 should currently also function but are NOT SUPPORTED)
-Gravity Forms Version 2.0.7+
-Server must support one of the following encryption methods:
OpenSSL Encryption Enabled -always recommended / required for PHP ver 7.2+
Mcrypt Encryption Enabled
Installation / Upgrade
IMPORTANT: Please refer to the plugin’s readme file for detailed instructions on upgrading between versions or initial install.
Current Available Version
4.3.7
Changelog (including near future versions)
Version 4.3.8 (currently in development)
* Fixed formatting of date fields in all decrypted merge tags to match the formatting selected for field.
* Changed file upload fields printout to html links to the file for ALL and ALL+ decrypted merge tags.
* Removed file upload fields links from core all_fields and plugin ALL and ALL+ merge tags if files are being deleted.
Version 4.3.7 (current available version)
* Fixed various potential PHP notices for users running in debug mode.
Version 4.3.6
* Fixed issue with both remove IP and delete for selected for the same form.
Version 4.3.5
* Fixed issue with “Process Feeds/Add-Ons before encrypting” option for non logged in users.
* Improved documentation.
Version 4.3.4
* Added “Process Feeds/Add-Ons before encrypting” option which delays encryption until after the data has been initially processed during submission through most feeds and addons.
* Added ability to delete individual field data from specified forms after submission/notifications/etc.
* Fixed some potential PHP notices for certain PHP versions when running in debug mode.
* Tested with Gravity Forms 2.3 release version.
Version 4.3.21
* Improvements to settings page instructions and buttons.
* Changed Section Breaks to print only if fields in section have data in all “ALL+” type custom tags.
* Removed Section Break Descriptions from all “ALL+” type custom tags.
Version 4.3.2
* Added Section Break labels and descriptions to all “ALL+” type custom tags.
* Changed “Name” fields printout to single line in all “ALL” and “ALL+” type custom tags.
* Changed “Address” fields printout for better address formatting in all “ALL” and “ALL+” type custom tags.
* All “ALL” and “ALL+” type custom tags code rewritten for exponential performance increase.
* Changed all “ALL” and “ALL+” type custom tags to more closely visually replicate standard {all_fields} tag.
Version 4.3.1
* Fixed Method callback handling for Gravity Forms versions prior or post 2.3
Version 4.3
* Gravity Forms 2.3 (rc-5) compatibility.
* Changed addtional core functionality to utilize the GFAPI
Version 4.2.3
* Fixed merge tage filtering for list fields
Version 4.2.2
* Fixed masking functionality for multiple masked fields (ver 4.0 – 4.2.1)
* Tested on WordPress 4.9.4
Version 4.2.1
* Full compatibility with Gravity Forms Partial Entries Add-On
Version 4.2
* Improved Setup Instructions
* Initial testing with Gravity Forms 2.3
* Tested with PHP 7.1.10.
* Fixed various notices in WPDebug mode.
Version 4.1.1
* Improved Setup Instructions
Version 4.1
* Improved Setup Instructions
Version 4.0
* Added list fields as fully supported field type for encryption.
* Added the {gfef_decrypt_ALL+} merge tag which outputs decrypted display of all fields from entry form regardless if data is encrypted or hidden. The behavior of this merge tag closely replicates the standard Gravity Forms {all_fields} tag but it decrypts all data.
* Added the {gfef_decrypt_ALL+_USER} merge tag which outputs decrypted display of all fields the current user has access to from the entry form regardless if data is encrypted or hidden. The behavior of this merge tag closely replicates the standard Gravity Forms {all_fields} tag but allows for data the user has permissions to to be viewed where the normal {all_fields} tag would show a restricted display do to the merge tag filter.
* Added ability to use roles in the User/Role Access List to quickly give access to all users in a role.
* Added listing of role names/slugs to settings that accept roles for permissions.
* Improved decrypted/encrypted merge tag option instructions.
* Changed the {gfef_decrypt_ALL} merge tag to also include data from fields that are hidden from having encryption turned on but are not actually encrypted.
* Fixed Undefined variable notice when running in debug mode.
Version 3.9.4
* Improved setup and usage instructions.
* Tested on WordPress 4.9
Version 3.9.3
* Added “Remove User IP Address From Form Submissions” setting to remove the users IP address from entry properties on submitted entries (IP is still able to be stored encrypted or unencrypted through standard field when using this option).
* Clarified instructions.
* Added default text for “Encrypted Field Restricted Display” and “Hide Field Value Restricted Display” so users without permission do not see blank restricted values by default on setup.
* Removed browser autocomplete from select inputs on settings page.
Version 3.9.2
* Added settings link to plugins page to help guide new users.
Version 3.9.1
* Updated the fields advanced options display to no longer show the blue dividing lines when options are not present
Version 3.9
* Updated the {gfef_decrypt_ALL} merge tag to output fields in form order instead of field_ID order.
* Updated the {gfef_decrypt_ALL} merge tag to output multi-part fields in a singular table row under a single label
* Updated locked out settings page with “unlock” button and notification for incorrect password entry
* Updated Settings Page LOCKOUT Password with a verification field and notifications for invalid or non-matching password entries
Version 3.8
* Added per field view permission option “Original Submitting User View Permission”, which allows original logged in submitting users view permissions to their own individual entry field data in addition to the normal “User/Role View Permission” list users/roles.
* Subtle visual changes
Version 3.7
* Added Hide Field Value controls to the “Global Form Encryption Switch”
* Fixed “Global Form Encryption Switch” to turn off hide field value when encryption turned on and turn off encryption when hide field value turned on.
* IMMEDIATE ISSUED BUG FIX for release 3.6: form fields not rendering
Version 3.6
* Added encrypted/hidden indicators by field labels for quick reference of encrypted/hidden fields in the form editor without having to open the field options.
* Added “Global Form Encryption Switch” to turn on/off encryption for all supported fields on a specified form to settings page.
* Updated instructions
Version 3.5
* Improved multi input field labels in {gfef_decrypt_ALL} merge tags.
* Code improvements/bug fix for {gfef_decrypt_ALL} merge tags not rendering all encrypted fields.
* Fixed {gfef_decrypt_ALL} merge tags to also include hidden field output.
* Added {gfef_decrypt_user_FIELD ID} merge tags to allow for specific field output through merge tags that checks the users view permissions to the field for use in “Gravity View” and other use cases where the merge tag is generating site content.
* Added {gfef_decrypt_USER} merge tag to allow for ALL encrypted and hidden field output through a single merge tag that checks the users view permissions to the fields for use in “Gravity View” and other use cases where the merge tag is generating site content.
* Bug fix for “undefined variable” when using the “encrypt/decrypt” tool.
Version 3.4
* Added instructions for manual website key generation for installations on web servers with security restrictions preventing auto generation.
* Code improvement.
Version 3.3
* Added plugin version reporting to unlocked settings page.
* Update author links.
* Added explanation for 0 entries processed if no ENTRY IDs are specified and MAX ENTRIES PER RUN is left blank to the encryption/decryption tool report.
Version 3.2
* Added {gfef_decrypt_ALL} merge tag for ability to include decrypted output of ALL encrypted and hidden fields through single merge tag with Decrypted Merge Tag tool output.
* Added Encryption Verification Mode Option to encryption test section of setting page to reveal raw encrypted data on entries pages for verification of encryption.
* Adjusted decrypted merge tag tool to no longer allow output of user owned fields unless original logged in submitting owner generates merge tag results.
* Form Encrypt/Decrypt Tool and Settings Page Lockout Password are now hidden by default to prevent accidental entries.
* Cleaned up options page with subtle visual improvements and Guide materials visibility toggles.
* Minor code improvements and CSS style streamlining.
NOTICE: (If upgrading from version prior to 3.0, before installing 3.0 you must first use the encrypt/decrypt tool to decrypt ALL previous entries with encryption and then upgrade to ver 3.0 and select encryption type and save changes, then encrypt previous entries again to resume functionality) Previously encrypted entries in prior versions CANNOT be decrypted/read using new encryption methods in ver 3.0+. IMPORTANT: Please always refer to the plugin’s readme file for detailed instructions on upgrading between versions.
Version 3.1
* Expanded Native Search Feature to attempt finding the entered search term(s) with varying capitalization automatically.
* Fixed Encryption Test to also warn users when encryption password override is on while using Open SSL encryption.
* Clarified Encryption Password Override instructions.
* Subtle visual changes to settings options page for more clear section breaks.
NOTICE: (If upgrading from version prior to 3.0, before installing 3.0 you must first use the encrypt/decrypt tool to decrypt ALL previous entries with encryption and then upgrade to ver 3.0 and select encryption type and save changes, then encrypt previous entries again to resume functionality) Previously encrypted entries in prior versions CANNOT be decrypted/read using new encryption methods in ver 3.0+. IMPORTANT: Please always refer to the plugin’s readme file for detailed instructions on upgrading between versions.
Version 3.0
* Added OpenSSL encryption with ability to select and switch encryption type.
* Changed Mcrypt encryption to add additional level of security.
* Added upgrade instructions notice to settings page for those upgrading from versions prior to 3.0 to 3.0+.
* Added ability to search user owned fields with “native search”.
* Changed “Encrypt/Decrypt Form Entries” tool to ONLY encrypt fields with encryption currently turned ON in form by default.
* Added option to “Encrypt/Decrypt Form Entries” tool to allow for encryption of fields with encryption currently turned OFF in form.
* Added subtle visual improvements to settings page.
NOTICE: (If upgrading from version prior to 3.0, before installing 3.0 you must first use the encrypt/decrypt tool to decrypt ALL previous entries with encryption and then upgrade to ver 3.0 and select encryption type and save changes, then encrypt previous entries again to resume functionality) Previously encrypted entries in prior versions CANNOT be decrypted/read using new encryption methods in ver 3.0+. IMPORTANT: Please always refer to the plugin’s readme file for detailed instructions on upgrading between versions.
Version 2.9.3
* Added native search functionality of encrypted field data (Can only search natively for exact field values. ..this includes any specific value of multi part field such as first name or last name. Excludes user owned fields until ver 3.0+).
* Added “Search Permission” option to limit users/roles ability to natively search based on encrypted field data.
* Added Encrypted Merge Tags {gfef_encrypt_FIELD ID} for developers to output an encrypted version of any field data in notifications and confirmations to be decrypted elsewhere by data or email recipient. Data that is unencrypted will still have an encrypted version output by this merge tag.
* Added floating “Save Changes” button to settings options page to assist quicker settings modifications.
* Changed “Search Data” option on settings screen to “Custom Data” encryption preview.
Version 2.9.1
* Added “Search Data” option to settings screen to allow for searching entry field data based on stored encrypted strings. ..This allows for reliable search based on encrypted fields.
Version 2.9
* Added ability to enter roles to fields user view permissions and the limit user view permissions list. Using role slugs in these locations now controls permissions for all user of a certain role per field without the need to add all the user names under that role. Individual users can be restricted elsewhere such as the lockout list and the finer grain individual user permissions will override the role locking the individual users out.
* Fixed the “Limit User/Role View Permission Lists” functionality so that when users/roles are in here, any field with a blank “User/Role View Permission List” still gives access to ALL users, but only users/roles in the limiting list will be valid if using the fields “User/Role View Permission List” to limit an individual fields view permissions. !!!!!! Please check setup on update. This will give access where there previously wasn’t if a fields “User/Role View Permission List” was blank but was restricting access still !!!!!
Version 2.7
* Added ability to auto delete specified form entries after submission/user registration.
* Added ability to auto delete specified form file uploads after submission/user registration.
* Added ability to attach specified form file uploads to specified notifications after submission/user registration before entry or file uploads are deleted.
Version 2.5
* Added custom output preview masking for fields including hidden/encrypted fields with option to use for entry view, and optionally also in merge tags.
* Added complete permissions bypass for full decrypted output (optionally including merge tags) for user specified form fields.
* Added admin controlled decrypted merge tags to allow for full decrypted output of field data in merge tags (confirmations and notifications) while still keeping all website view permissions.
* Changed the Merge Tag Filter to allow for filtering of individual merge tags as well as the “all Fields” merge tag to allow for single field merge tags to be used with masking.
* Removed browser auto completion from settings page lockout password field and settings page. (Please update your lockout password, or clear browsers autocomplete cache/storage after upgrading to this version if your browser is auto completing tis password curently. Nothing is recommended on new installs).
* Added notice to failed encryption test for when encryption override password is on.
Version 2.3
* Added encryption removal/reversal with the ability to specify the form, entries, and fields to be decrypted and user owned field control.
* Added Encryption/Decryption Reporting to admin settings options page to report status of manual encryption/decryption runs.
* Improved priority of encryption function to allow for other hooked functions to be pre-processed.
* Added encryption to admin option settings page password for database storage.
* Fixed display of 0 value data when encrypted.
* Code cleanup and improvements
Version 2.0
* Added ‘User Owned Field’ advanced field option to allow only the logged in user who originally submitted the data to be able to view it as readable even if another user updates the data. -This overrides ALL other user permissions.
* Added conditional option to allow front end display of encrypted/hidden data for users with permission
* Added option to save settings when deleting plugin to install updated version
* Added option to save admin options page password regardless of deleting other settings to prevent password bypass when uninstalling and reinstalling plugin.
* Code cleanup and improvements
Version 1.7.2
* Added Feature to optionally password protect admin options screen
Version 1.7.1
* Bug fix for salt creation and zero value data
Version 1.7
* Added Merge Tag Filter and {all_fields} Merge Tag Exclude/Include Options
* Expanded the system check to include encryption bypass and merge tag filter for quick overview of system settings
Version 1.6
* Added Feature to ‘Limit User View Permission Lists’
Version 1.5
* Added Feature ‘User Access List’
* Fixed encryption of zero value data.
* Added Instructions and in depth option descriptions
Version 1.2
* Added Hide Field data safe option
* Changed decryption to no longer require field encryption turned on for users with permission
* Changed restricted displays to respond to whether or not data is actually encrypted or just hidden
Version 1.0
* Initial version
[eltd_button size=”huge-full-width” type=”outline” text=”Download & Demo Links” custom_class=”#” icon_pack=”font_awesome” fa_icon=”” link=”” target=”_blank” color=”” hover_color=”” background_color=”” hover_background_color=”” border_color=”” hover_border_color=”” font_size=”” font_weight=”” margin=””]
Demo = Gravity Forms Encrypted Fields
[eltd_button size=”huge” type=”” text=”Full Live Demo” custom_class=”” icon_pack=”font_awesome” fa_icon=”fa-laptop” link=”https://codecanyon.net/item/gravity-forms-encrypted-fields/18564931″ target=”_blank” color=”” hover_color=”” background_color=”” hover_background_color=”” border_color=”” hover_border_color=”” font_size=”” font_weight=”” margin=””]
Kindly Note: We update new contents like WordPress Themes, Plugins, PHP Scripts everyday. But remember that you should never use this items in a commercial website. All the contents posted here for development & testing purpose only. We’re not responsible for any damage, use at your own RISK! We highly recommend to buy Gravity Forms Encrypted Fields from the The Developer ( PluginOwl ) website. Thank you.
Download = Gravity Forms Encrypted Fields-[Updated].zip