Passwords, access credentials, API keys, and other confidential details can be submitted separately from regular ticket messages and stored in encrypted form.
Authorized staff members can reveal the submitted content directly from the related ticket, while configurable deletion rules help limit how long sensitive information remains available.

We will guide you step by step through the installation and configuration process.

The package contents should be uploaded without changing the provided directory structure.

Next, open the renamed file and enter your license key. The license key is available in our client area under 'My Products'.

Find 'Secure Messages' on the list and press 'Activate'.
Press 'Configure' , select the administrator role groups that should have access to the module, and save the changes.

The module is now available under 'Addons' → 'Secure Messages'.

In this guide, we will walk you through the module configuration and explain how clients and support staff can manage secure messages.

The table includes the following information:

• ID – the unique identifier of the secure message.

• Secure Data Name – the name assigned to the entry.

• Client – the client who submitted the secure message.

• Ticket – the related WHMCS support ticket.

• Last Revealed – the date and time when the secure message was revealed by admin staff.

• Created – the date and time when the secure message was added.

Use the eye icon in the last column to view the selected entry.

The secure content is revealed only after an authorized administrator opens the entry.

• Delete Secure Data When Ticket Is Closed – automatically delete all secure messages attached to a ticket when the ticket is closed.

• Delete Secure Data Older Than (Days) – automatically delete secure messages older than the specified number of days. Enter 0 to disable automatic deletion based on age.

• Display Secure Data List – show secure messages attached to a ticket in the client ticket view.

• Allow Clients to Delete Secure Data – allow clients to delete secure messages they have added to tickets.

• Display Add Secure Data Widget – display a separate panel that clients can use to add secure information from the ticket view.

• Inline Mode – add a secure data field directly to the standard WHMCS ticket reply form instead of displaying a separate panel.

• Available in Departments – select the support departments in which secure messaging will be available in the client area. Leave the field empty to enable it for all departments.

The tab lists all secure messages attached to the currently opened ticket.

• ID – the unique identifier of the secure message.

• Secure Data Name – the name assigned to the entry.

• Last Revealed - information if the content has been revealed and when

• Created – the date and time when the entry was added.

Use the eye icon to reveal the selected secure message.

Enter a name for the entry and provide the sensitive content, then confirm the action.

Please note that deleted secure messages cannot be restored.

Depending on the module configuration, secure messages may be added through a separate panel or through fields integrated directly with the standard WHMCS ticket forms.

The field is available when clients reply to an existing ticket only.

The provided content is submitted together with the ticket form but stored separately from the regular ticket message.

This allows sensitive information to be submitted independently of a regular ticket reply.

Opening a new ticket view:

Only the message metadata is displayed in the list. The encrypted content is not included in the regular ticket conversation.

This feature allows you to assign permissions, define resource access for administrators, and track activities with detailed logs.
Customize access settings to fit your team’s structure and maintain transparency with ease. For comprehensive guidance, refer to the tool's dedicated article.

For precise details on Logs, please refer to our dedicated documentation article, which you may find here.

Regular questions and descriptions should still be entered in the standard ticket message field.

Keeping sensitive information only as long as necessary reduces the amount of confidential data stored in WHMCS.

Only administrator roles that require access to client credentials should be allowed to reveal encrypted content.

Follow each step carefully to complete the update successfully and prevent data loss or other unexpected issues.

Make sure that 'Ticket Form Integration' or 'Display Add Secure Data Widget' is enabled. Also check whether the relevant support department has been selected under 'Available in Departments'.

Check whether 'Display Secure Data List' is enabled in the module's client area settings.

Make sure that 'Allow Clients to Delete Secure Data' is enabled. Clients can delete only secure messages they have submitted themselves.

This is expected when 'Delete Secure Data When Ticket Is Closed' is enabled. Deleted secure messages cannot be restored.