Briefnote

Briefnote is designed for developers and site administrators who need a secure, centralized location to store development notes and sensitive credentials directly within the WordPress admin interface. The plugin combines a powerful Markdown editor with enterprise-grade encryption for credential storage.

Markdown Notes Editor

• Live-rendering WYSIWYG editor powered by Toast UI Editor
• Syntax highlighting for PHP, JavaScript, CSS, HTML, SQL, Bash, JSON, and YAML
• GitHub Flavored Markdown support including tables, task lists, and fenced code blocks
• Auto-save with 2-second debounce to prevent data loss
• Manual save option with visual confirmation
• Dark and light mode themes

Secure Credentials Storage

• AES-256 equivalent encryption using libsodium (XSalsa20-Poly1305)
• Support for multiple credential types: Username/Password, API Keys, SSH Keys, Secure Notes
• Reveal and copy functionality with audit logging
• Optional password re-verification for sensitive operations
• Role-based access control with custom capability

Audit Logging

• Comprehensive activity tracking for all credential operations
• Notes access and modification logging
• Copy/paste detection and logging
• IP address recording and user attribution
• Configurable log retention period

Security Features

• Automatic encryption key generation (no configuration required)
• CSRF protection on all operations
• Rate limiting on password verification
• Input sanitization and output escaping
• Memory cleanup for sensitive data

Privacy Policy

Briefnote does not collect, transmit, or share any user data with external services. All data is stored locally in your WordPress database. The plugin does not make any external API calls or load resources from external servers.

Third-Party Libraries

This plugin bundles the following third-party libraries:

• Toast UI Editor (MIT License) – https://ui.toast.com/tui-editor
• Prism.js (MIT License) – https://prismjs.com/

Both libraries are GPL-compatible and are included locally within the plugin.