How can we improve WHMCS?

Share, discuss and vote for what you would like to see added to WHMCS

  1. Home
  2. Ideas
  3. Other
  4. Rotate CC Encryption Hash

Rotate CC Encryption Hash



4 Votes
Login to Vote
In terms of security, having the ability to rotate out the CC Encryption key for all encrypted data within WHMCS would be extremely useful and beneficial.

Even if it's a function in the WHMCS classes like WHMCS\Encrpytion\Rotate($newKey) - that goes through all the encrypted database fields - unencrypts them and re-encrypts them with the new new key.

It would also be nice to be able to integrate with an external encryption service / key management service to store the CC Encrpytion hash so that it is not just stored in plain text in the configuration file.

2 Comments

Login to post a comment.

bitero commented 1 week ago
Implementing a feature to rotate the CC Encryption key would undoubtedly enhance security within WHMCS. Adding a function like WHMCS\Encryption\Rotate($newKey) to handle re-encrypting database fields is a practical idea. Moreover, integrating with an external encryption or key management service to securely store the encryption key would provide an extra layer of protection, aligning with best practices for sensitive data handling.
https://idlebreakout.org/
decade commented 22nd August 24
Even if the function traverses through all the encrypted database fields in the WHMCS classes, such as WHMCS\Encrpytion\Rotate($newKey), it first decrypts them before re-encrypting them with the new key. https://geometry-lite.io