Description
Dreamax License Manager is a self-hosted license operations plugin for WooCommerce stores that sell software and other licensed products. It keeps licensing data under the store owner’s control and does not depend on an external licensing service.
The plugin itself does not require a license key, payment, subscription, trial, quota, or external service. Every feature included in this plugin is available without an upgrade. License checks performed by the plugin apply only to license keys that the store owner issues for their own products.
Dreamax License Manager is published by Dreamax Soft.
License management
- Generate cryptographically strong license keys or import existing keys.
- Track ownership, lifecycle state, activation use, and expiry in one inventory.
- Assign, extend, suspend, revoke, release, reassign, or delete licenses through controlled workflows.
- Record creation, delivery, activation, reveal, reassignment, and lifecycle changes in an audit trail.
- Preview mapped CSV imports before writing data, process larger imports in background batches, and download row-level error reports.
- Export filtered license or activation inventories, with keys masked unless an authorized administrator explicitly confirms a full-key export.
WooCommerce automation
- Enable licensing per simple product or variation.
- Generate keys securely or allocate them from an imported key pool.
- Issue one license per purchased quantity or one per order item.
- Set activation limits, validity periods, and refund and cancellation policies.
- Allocate and deliver licenses when eligible orders are paid.
- Recover or backfill eligible historical orders through guarded order tools.
- Work with WooCommerce HPOS, classic order storage, Checkout Blocks, and classic checkout.
Customer access
- Publish a login-protected standalone license dashboard without depending on a theme’s WooCommerce account layout.
- Direct the WooCommerce My Account Licenses link to the configured standalone dashboard, with the account endpoint retained as a fallback.
- Keep license keys masked until an authorized customer chooses to reveal and copy one.
- Let guest purchasers claim eligible orders through a time-limited one-time-code flow.
- Prevent one customer from viewing another customer’s license records.
- Let customers activate replacements and deactivate old installations when the merchant enables self-service management.
API and integrations
- Validate, activate, and deactivate licenses through public REST endpoints.
- Create narrowly scoped, expiring Bearer credentials for trusted management integrations.
- Rotate or revoke management credentials without storing recoverable secrets.
- Apply request validation, rate limits, idempotency controls, and auditable privileged operations.
Security and recovery
License keys are protected with authenticated encryption provided by the Sodium PHP extension. The dedicated master key is stored in wp-config.php, not in the WordPress database. A keyed lookup fingerprint supports exact matching without storing a searchable plaintext key.
The System Status screen checks encryption, storage, scheduled cleanup, HTTPS, and required platform capabilities. If the master key is missing or does not match, the plugin enters recovery mode and pauses sensitive licensing operations without changing the stored encrypted data.
Back up the dedicated master key separately from the database. A database backup alone cannot recover clear license keys.
Requirements
- WordPress 6.9 or later.
- WooCommerce 10.8 or later.
- PHP 8.0 or later with the Sodium extension.
- InnoDB-compatible database tables for transactional activation enforcement.
- HTTPS for production sites and credential-bearing API requests.
Screenshots
Installation
- Confirm that WordPress, WooCommerce, PHP, Sodium, HTTPS, and the database meet the requirements above.
- Install and activate WooCommerce.
- Upload the
dreamax-license-managerdirectory to/wp-content/plugins/, or install the plugin through the WordPress Plugins screen. - Activate Dreamax License Manager.
- Open License Manager -> System status.
- Generate the one-time
wp-config.phpmaster-key snippet and add it towp-config.php. - Back up the master key separately and confirm that encryption and storage are ready.
- Edit a WooCommerce product, enable licensing, and choose its key source, issuance mode, activation limit, validity, refund policy, and cancellation policy.
- Complete a test order and verify delivery, customer access, and activation before using the workflow in production.
- Open License Manager -> Customer Portal and create the login-protected customer dashboard page.
FAQ
-
Does the plugin need a paid service or license key?
-
No. The plugin is fully self-hosted and all included functionality is available without payment, a subscription, or a license key for the plugin itself.
-
Can a database backup alone recover clear license keys?
-
No. Back up the dedicated external master key separately and verify a disposable restore.
-
Does the plugin require WooCommerce?
-
Yes. WooCommerce is required for product configuration, order ownership, allocation, delivery, and customer account integration.
-
Can I import existing license keys?
-
Yes. You can import existing keys for later allocation or create an individual license by importing its exact key. Use the CSV preview before confirming a bulk import.
-
How do customers receive and view licenses?
-
Eligible paid orders receive assigned licenses through the WooCommerce workflow. Signed-in customers use the configured standalone dashboard, where keys remain masked until explicitly revealed. The WooCommerce My Account Licenses link opens that dashboard, while the original account endpoint remains available as a fallback until the dashboard page is configured. Eligible guest orders can be claimed through the one-time-code flow.
-
Can another application validate and activate licenses?
-
Yes. Public REST endpoints support license validation, activation, and deactivation. Trusted management integrations can use separately scoped and expiring credentials.
-
What happens if the master key is lost or changed?
-
The plugin enters recovery mode and pauses sensitive operations. Stored encrypted values are not modified, but the original dedicated master key is required to decrypt existing license keys.
-
Is client-side licensing unbreakable DRM?
-
No. Distributed client code is inspectable. The server protects legitimate access, activation state, support, and future service boundaries.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Dreamax License Manager” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Dreamax License Manager” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
0.4.1
- Adds a narrow Free-owned command contract for product-bound, idempotent license expiry extensions from verified commercial renewal workflows.
- Rejects changed-payload replays, future-dated commands, product mismatches, and writes while storage or encryption recovery is unavailable.
0.4.0
- Adds a versioned, additive developer contract for separately distributed extensions without changing Free licensing behavior.
- Keeps Free authoritative for license and activation decisions while exposing only sanitized snapshots through a locked provider registry.
0.3.8
- Prevents automatic and manual license allocation unless WooCommerce confirms that the order is paid and is not cancelled, failed, or refunded.
0.3.7
- Adds merchant-controlled generators, product and per-license policy controls, customer activation management, and clearer inventory and high-impact action previews.
- Expands CSV import/export with mapping, bounded resumable batches, private reports, and filtered or masked exports; adds detailed setup diagnostics and explicit REST schemas.
- Hardens queued-import worker ownership and verifies customer isolation, public API behavior, recovery, and data cleanup against disposable WordPress fixtures.
0.3.6
- Extends recovery-safe key handling to the legacy account endpoint, order details, thank-you pages, customer emails, resend operations, and CSV exports.
- Prevents failed key access from recording misleading reveal/export events or consuming resend idempotency operations, while keeping non-sensitive records available.
0.3.5
- Keeps the customer license portal available when secure key decryption is temporarily unavailable, lists non-sensitive license details, and pauses reveal/copy actions without exposing internal errors.
- Improves the standalone portal’s signed-out heading and keeps degraded-mode notices compact across responsive layouts.
0.3.4
- Made the configured standalone License Dashboard the primary destination from WooCommerce My Account while retaining the original licenses endpoint as a safe fallback.
0.3.3
- Added a login-protected standalone customer license dashboard, a guarded setup screen, responsive license views, and a clearer guest-order claim flow.
- Rebuilt the WooCommerce My Account license presentation and kept key reveal, ownership, cache, nonce, and redirect boundaries intact.
- Added an actionable fresh-install encryption notice that links administrators to the one-time master-key setup screen.
0.3.2
- Addressed WordPress.org review feedback for enqueued assets, privileged REST permission callbacks, request validation, and clearer fully functional self-hosted licensing documentation.
0.3.1
- Redesigned the license, activity, portability, status, API credential, and WooCommerce order-operation screens with clearer preview, confirmation, availability, and audit context.
- Hardened REST credential handling for absent request bodies and authorization headers, made order recovery and ownership workflows safer, and resolved all official Plugin Check findings with explicit prepared SQL identifiers and uninstall hygiene.
0.3.0
- Added secure one-time-code guest-order claims, atomic privileged credential rotation/revocation, a central validated versioned audit-event contract, snapshotted refund/cancellation policies, deterministic partial-refund mapping, guarded quantity edits, explicit post-delivery allocation, resend, and preview-confirmed historical-order backfill.
- Added sequential migration verification, deterministic packaging/provenance, seeded performance fixtures, and guarded live acceptance evidence.
0.2.0
- Added transactional, retry-safe lifecycle operations, bulk administration, reassignment, activation reset, guarded deletion, filters, details, and recent activity.
0.1.0
- Added the initial development foundation.