Beschrijving
Lawyer Locker
Beschrijving
Encrypted lockers for secure client communication and file sharing.
Locker Features
- Individual Client Lockers: Each client gets a unique, password-protected, secure area
- Secure File Sharing: Upload and download encrypted files with full privacy
- Message Thread: Secure, timestamped communication log between lawyer and client
- Activity Audit Trail: Track all locker access, file downloads, and messages
- No Client Accounts Required: Share a simple URL with encryption key in the fragment
Lockbox Features
- One-offs: One-time encrypted messages that self-destruct after reading
- End-to-End Encryption: All data is encrypted in the browser using AES-256-GCM before transmission
- Zero-Knowledge Server: The server never has access to encryption keys or plaintext data
- No Client Accounts Required: Share a simple URL with encryption key in the fragment
How it Works
- Lawyer creates a locker in WordPress admin
- Plugin generates a unique URL with encryption key (
/locker/abc123/#encryption-key) - Lawyer shares this URL securely with their client
- Both parties access the locker using the same URL
- All messages and files are encrypted/decrypted locally in the browser
- Server only stores encrypted blobs (no plaintext ever touches the server)
Security Notice
The encryption key is included in the URL fragment (after the #). This must be shared securely:
- Use encrypted email (Proton)
- Use secure messaging (Signal)
- Use the built-in Lockbox feature
- Share in-person or via phone
- DO NOT send via regular email (Gmail, Yahoo, Hotmail) or SMS
Perfect For
- Law firms managing sensitive client communications
- Accountants sharing financial documents
- Healthcare providers (HIPAA compliance considerations)
- Politicians and government officials
- Journalists and activists
- Anyone requiring genuine privacy and confidentiality
Technical Details
- Uses Web Crypto API for browser-based AES-256-GCM encryption
- Custom database tables for encrypted files and activity logs
- No third-party dependencies
- Clean, minimal codebase
Browser Requirements
- Modern browser with Web Crypto API support (all current browsers)
- JavaScript must be enabled (required for encryption/decryption)
For the Lawyers
Lawyer Locker is part of the For the Lawyers initiative, a project dedicated to lawyers, finding all the gaps on the web to make their lives easier, and filling them.
For support and other WordPress tools for legal pros, go to forthelawyers.co.
Installatie
Automatic
- From your WordPress Admin, navigate to: Plugins > Add New
- Search for: “Lawyer Locker”
- Install and activate the plugin
Manual
- Download the plugin ZIP file
- From your WordPress admin, navigate to: Plugins > Add New > Upload Plugin
- Click “Choose File” and select the downloaded ZIP file
- Click “Install Now”
- After installation completes, click “Activate”
Setup
- Go to Lockers > Settings in your WordPress admin
- (Optional) Enable the Lockbox feature for one-time encrypted messages
- Configure the privilege footer text for legal declarations
- Create your first locker via Lockers > Add Locker
- Copy the secure link and share it with your client
FAQ
Is this TRULY end-to-end encrypted and zero-knowledge?
Lockbox: Yes. True end-to-end encryption and zero-knowledge. The encryption key is never stored on the server.
Lockers: No. While very secure (more than most email or banking platforms), encryption keys are stored encrypted on the server. This means if your database AND server files are both compromised, messages could theoretically be decrypted.
Why this design? Lockers need persistent access. True zero-knowledge would require you to manually save and manage encryption keys for every locker offline, which is impractical and more likely to result in permanent data loss than a breach.
For maximum security, use password-protected Lockers or the Lockbox feature.
What happens if someone loses the Lockbox URL?
If a Lockbox URL is lost, the data cannot be recovered. This is a security feature, not a bug. There is no “password reset” because that would require the server to have access to the encryption keys. Make sure to save the URL securely.
Can I use this for purposes other than legal work?
Yes. While specially intended for lawyers, Lawyer Locker is perfect for accountants, healthcare providers, therapists, journalists, activists, or anyone who needs self-hosted secure communication and file sharing.
Can I use this for HIPAA compliance?
While Lawyer Locker provides strong encryption, HIPAA compliance requires more than just encryption. Consult with your compliance officer to ensure your entire workflow meets HIPAA requirements. This plugin can be part of a HIPAA-compliant setup, but is not sufficient on its own.
How large of files can I upload?
File size limits depend on your server’s PHP configuration (upload_max_filesize and post_max_size). Encrypted files are slightly larger than the original due to encryption overhead. Very large files may require server configuration changes.
What encryption algorithm is used?
AES-256-GCM (Advanced Encryption Standard with 256-bit keys in Galois/Counter Mode). This is a modern, secure, authenticated encryption algorithm widely used in cryptographic applications.
Beoordelingen
Er zijn geen beoordelingen voor deze plugin.
Bijdragers & ontwikkelaars
“Lawyer Locker” is open source software. De volgende personen hebben bijgedragen aan deze plugin.
Bijdragers
Vertaal “Lawyer Locker” in je eigen taal.
Interesse in ontwikkeling?
Bekijk de code, haal de SVN repository op, of abonneer je op het ontwikkellog via RSS.
Changelog
0.1
- New
