Title: Lawyer Locker Author: Web Guy Published: January 5, 2026 Last modified: January 21, 2026 --- Search plugins ![](https://ps.w.org/lawyer-locker/assets/icon-256x256.png?rev=3433103) # Lawyer Locker By [Web Guy](https://profiles.wordpress.org/webguyio/) [Download](https://downloads.wordpress.org/plugin/lawyer-locker.zip) * [Details](https://wordpress.org/plugins/lawyer-locker/#description) * [Reviews](https://wordpress.org/plugins/lawyer-locker/#reviews) * [Installation](https://wordpress.org/plugins/lawyer-locker/#installation) * [Development](https://wordpress.org/plugins/lawyer-locker/#developers) [Support](https://wordpress.org/support/plugin/lawyer-locker/) ## Description [💬 Ask Question](https://github.com/webguyio/support) | [📧 Email Me](https://wordpress.org/plugins/lawyer-locker/webguywork@gmail.com?output_format=md) Encrypted lockers for secure client communication and file sharing. **Locker Features** * **Individual Client Lockers**: Each client gets a unique, password-protected, secure area * **Secure File Sharing**: Upload and download encrypted files with full privacy * **Message Thread**: Secure, timestamped communication log between lawyer and client * **Activity Audit Trail**: Track all locker access, file downloads, and messages * **No Client Accounts Required**: Share a simple URL with encryption key in the fragment **Lockbox Features** * **One-offs**: One-time encrypted messages that self-destruct after reading * **End-to-End Encryption**: All data is encrypted in the browser using AES-256- GCM before transmission * **Zero-Knowledge Server**: The server never has access to encryption keys or plaintext data * **No Client Accounts Required**: Share a simple URL with encryption key in the fragment **How it Works** 1. Lawyer creates a locker in WordPress admin 2. Plugin generates a unique URL with encryption key (`/locker/abc123/#encryption- key`) 3. Lawyer shares this URL securely with their client 4. Both parties access the locker using the same URL 5. All messages and files are encrypted/decrypted locally in the browser 6. Server only stores encrypted blobs (no plaintext ever touches the server) **Security Notice** The encryption key is included in the URL fragment (after the #). This must be shared securely: * Use encrypted email (Proton) * Use secure messaging (Signal) * Use the built-in Lockbox feature * Share in-person or via phone * DO NOT send via regular email (Gmail, Yahoo, Hotmail) or SMS **Perfect For** * Law firms managing sensitive client communications * Accountants sharing financial documents * Healthcare providers (HIPAA compliance considerations) * Politicians and government officials * Journalists and activists * Anyone requiring genuine privacy and confidentiality **Technical Details** * Uses Web Crypto API for browser-based AES-256-GCM encryption * Custom database tables for encrypted files and activity logs * No third-party dependencies * Clean, minimal codebase **Browser Requirements** * Modern browser with Web Crypto API support (all current browsers) * JavaScript must be enabled (required for encryption/decryption) #### For the Lawyers Lawyer Locker is part of the [For the Lawyers](https://forthelawyers.co/) initiative, a project dedicated to lawyers, finding all the gaps on the web to make their lives easier, and filling them. For support and other WordPress tools for legal pros, go to [forthelawyers.co](https://forthelawyers.co/). ## Installation **Automatic** 1. From your WordPress Admin, navigate to: _Plugins > Add New_ 2. Search for: “Lawyer Locker” 3. Install and activate the plugin **Manual** 1. Download the plugin ZIP file 2. From your WordPress admin, navigate to: _Plugins > Add New > Upload Plugin_ 3. Click “Choose File” and select the downloaded ZIP file 4. Click “Install Now” 5. After installation completes, click “Activate” **Setup** 1. Go to _Lockers > Settings_ in your WordPress admin 2. (Optional) Enable the Lockbox feature for one-time encrypted messages 3. Configure the privilege footer text for legal declarations 4. Create your first locker via _Lockers > Add Locker_ 5. Copy the secure link and share it with your client ## FAQ ### Is this TRULY end-to-end encrypted and zero-knowledge? **Lockbox:** Yes. True end-to-end encryption and zero-knowledge. The encryption key is never stored on the server. **Lockers:** No. While very secure (more than most email or banking platforms), encryption keys are stored encrypted on the server. This means if your database AND server files are both compromised, messages could theoretically be decrypted. Why this design? Lockers need persistent access. True zero-knowledge would require you to manually save and manage encryption keys for every locker offline, which is impractical and more likely to result in permanent data loss than a breach. For maximum security, use password-protected Lockers or the Lockbox feature. ### What happens if someone loses the Lockbox URL? If a Lockbox URL is lost, the data cannot be recovered. This is a security feature, not a bug. There is no “password reset” because that would require the server to have access to the encryption keys. Make sure to save the URL securely. ### Can I use this for purposes other than legal work? Yes. While specially intended for lawyers, Lawyer Locker is perfect for accountants, healthcare providers, therapists, journalists, activists, or anyone who needs self- hosted secure communication and file sharing. ### Can I use this for HIPAA compliance? While Lawyer Locker provides strong encryption, HIPAA compliance requires more than just encryption. Consult with your compliance officer to ensure your entire workflow meets HIPAA requirements. This plugin can be part of a HIPAA-compliant setup, but is not sufficient on its own. ### How large of files can I upload? File size limits depend on your server’s PHP configuration (upload_max_filesize and post_max_size). Encrypted files are slightly larger than the original due to encryption overhead. Very large files may require server configuration changes. ### What encryption algorithm is used? AES-256-GCM (Advanced Encryption Standard with 256-bit keys in Galois/Counter Mode). This is a modern, secure, authenticated encryption algorithm widely used in cryptographic applications. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Lawyer Locker” is open source software. The following people have contributed to this plugin. Contributors * [ Web Guy ](https://profiles.wordpress.org/webguyio/) [Translate “Lawyer Locker” into your language.](https://translate.wordpress.org/projects/wp-plugins/lawyer-locker) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/lawyer-locker/), check out the [SVN repository](https://plugins.svn.wordpress.org/lawyer-locker/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/lawyer-locker/) by [RSS](https://plugins.trac.wordpress.org/log/lawyer-locker/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 0.1 * New ## Meta * Version **0.1** * Last updated **3 months ago** * Active installations **Fewer than 10** * WordPress version ** 5.0 or higher ** * Tested up to **6.9.4** * PHP version ** 7.4 or higher ** * Tags * [clients](https://wordpress.org/plugins/tags/clients/)[communication](https://wordpress.org/plugins/tags/communication/) [encryption](https://wordpress.org/plugins/tags/encryption/)[lawyers](https://wordpress.org/plugins/tags/lawyers/) [privacy](https://wordpress.org/plugins/tags/privacy/) * [Advanced View](https://wordpress.org/plugins/lawyer-locker/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/lawyer-locker/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/lawyer-locker/reviews/) ## Contributors * [ Web Guy ](https://profiles.wordpress.org/webguyio/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/lawyer-locker/) ## Donate Would you like to support the advancement of this plugin? [ Donate to this plugin ](https://forthelawyers.co/donate)