WPKeyDrop lists every plugin on your site and gives each one a Download ZIP button. Grab a clean, re-installable copy of anything that is running — the premium plugin you bought once, the custom build with no download page, the whole lot before an update.
FREE · NO ACCOUNT · NOTHING PHONES HOME · GPL-2.0
“The plugin is installed and working. The company is gone, the download link is dead, and I need the exact version on the next site by Friday.”— Every agency, eventually
WordPress will install a plugin and then give you no way to get the file back out. WPKeyDrop closes that gap in one click. It repackages what is already on disk into a standard ZIP, so the version you are running is the version you keep — no hunting for an installer, no hosting login, no third party in the middle.
WPKeyDrop adds a single page under Tools. It reads the plugins already installed on the site and lets you package any one of them, exactly as it sits on disk, without leaving the dashboard.
Active or not, in the directory or not, WPKeyDrop shows every plugin on the site with its name, version and status. The ones you most need to keep are usually the ones WordPress cannot re-download for you — the premium purchase, the client-specific build, the plugin whose author has vanished.
Each download packages the plugin folder as it is now, with the correct top-level directory, so the ZIP installs straight back through Add New → Upload Plugin on any site. Single-file plugins are handled the same way. What comes out is a faithful copy, including customisation already on disk.
The screen needs the manage_options capability, and every download URL carries a nonce so a copied link cannot be replayed by someone else. There is no public route in. On a client site, only the people who already run the place can reach it.
WPKeyDrop acts solely on a plugin WordPress reports as installed, then resolves the path with realpath() and confirms it lands inside the plugins directory before it writes a byte. A request pointed anywhere else is refused. The archive is built in a temp file and deleted the moment it has been sent.
No API, no account, no telemetry, no third-party host holding your plugins. The ZIP is built on your own server and streamed straight to you. The only thing that ever leaves the building is the registration email you asked us to send.
There is no Pro tier waiting to unlock the useful part. WPKeyDrop is free under the GPL, the same licence as WordPress itself. Request a key so we can email you about updates, then use the plugin with or without it — it never checks.
You bought the plugin, it is installed and working, and the vendor's site is a parked domain. Package the copy you already have and keep the exact version, no receipt-hunting required.
Moving a site to a new host or a fresh install? Pull the plugins you need as ZIPs and upload them the other side, versions matched, without touching FTP or a backup archive.
A custom plugin with no name in the directory and no developer to ask. Grab it as a ZIP before you change anything, so you have a copy the moment you need to roll back.
About to update a plugin you are not sure about? Take the current version first. If the new one misbehaves, you have the working build sitting on your desktop.
You need the same plugin, same version, on staging and live. Download once, upload where you need it, and stop wondering whether the two environments drifted apart.
Leaving a client with what they paid for. Package the plugins that matter and hand over real files, not a promise that the licence will keep working.
Every plugin WordPress knows about, active or not, with its version. The row you want is often the one you can no longer find anywhere else.
One click packages that plugin's folder into a ZIP with the correct top-level directory, ready to upload straight back into WordPress.
Before the archive is built, the path is resolved and checked against the plugins directory. A request aimed anywhere else is refused, not served.
PACKAGED, and then gone. The archive is built in a temp file, streamed to your browser, and deleted. Nothing lingers and nothing is sent away.
Yes. One edition, every feature, no licence to buy and nothing gated. Request a key on this page and it arrives by email so we can let you know about updates, but the plugin works with or without it — it never checks. GPL-2.0, same as WordPress.
Two reasons, both honest. It gives you a record that you have the plugin, and it gives us a way to email you when there is a new version or a security fix. The key is a registration token, not a lock. Paste it nowhere; keep it in your records. WPKeyDrop unzips and downloads plugins whether you enter it or not.
The plugin folder as it sits on your server right now, packaged into a standard ZIP with the correct top-level folder. That means the archive re-installs cleanly through Plugins → Add New → Upload Plugin on any site. Single-file plugins are handled too. What you get is a faithful copy of what is installed, including any customisation already on disk.
Only a logged-in administrator with the manage_options capability. Every download link is nonce-protected, so a copied URL cannot be replayed by anyone else, and the screen lives under Tools where non-admins never see it.
No. It only ever acts on a plugin WordPress itself reports as installed, and before it builds the archive it resolves the path with realpath() and checks the result sits inside the plugins directory. A crafted request that points elsewhere is refused rather than served.
Never. There is no server, no API call, no telemetry. The ZIP is built on your own server and streamed to your browser. The only thing that ever leaves is the email you ask us to send you with your registration key.
The screen tells you plainly and disables the download buttons rather than failing halfway. ZipArchive (php-zip) is available on almost every host; if yours has it switched off, one line to support turns it back on.
It is a fast way to grab one plugin, or a handful, exactly as installed — the thing you reach for before an update, during a migration, or when you have inherited a site and want a copy of a plugin you cannot find in the directory. It is not a scheduled whole-site backup, and it does not pretend to be.
Add your name and email. We send your free registration key and the download link straight back, then install it, open Tools → WPKeyDrop, and every installed plugin is one click from a ZIP. The key is only so we can tell you about updates — the plugin never asks for it.
FREE FOREVER · NO ACCOUNT · GPL-2.0 · SUPPORT BY ACTUAL HUMANS