BYLTCommerce Toolkit

BYLTCommerce Toolkit replaces a pile of single-purpose plugins with one plugin made of modules. Switch on the modules a site needs under Toolkit → Modules. A module that’s off loads no code at all: no hooks, scripts or database queries.

It works with or without WooCommerce. Store modules say “Requires WooCommerce” and switch on once it’s active.

Free modules

Customer Manager (WooCommerce)
A real customer screen: profile, billing and shipping addresses, total spent, order count, average order, recent orders and an activity log. Customer names in WooCommerce → Customers open it instead of the WordPress user editor.

• Email a password reset link, or set a password for the customer. The password is never emailed or logged.
• Guest customers: see their guest orders and create an account that keeps them.

Create Customer from Order (WooCommerce)
A “New customer” link under the Customer field on the order screen. It creates the account, selects it on the order, fills in the billing name, email and phone, and can email a link to set a password.

Login as Customer (WooCommerce)
See the store exactly as a customer does, then switch back. Only customer accounts can be switched to, never staff. The switch-back link is single-use, tied to your browser and expires after 12 hours. Every switch is recorded in the audit log.

Address Book (WooCommerce)
Customers save several shipping and billing addresses in My Account and pick one at checkout, in the classic and block checkout.

Checkout Protection (WooCommerce)
Stops card-testing bots with Cloudflare Turnstile or Google reCAPTCHA on checkout, login and registration, including the block checkout and direct Store API requests. IPs with repeated failed payments are locked out for a while. Staff are never asked to verify.

Form Protection
The same Turnstile or reCAPTCHA check for the WordPress login and registration forms, comments, and Contact Form 7, Gravity Forms and WPForms. No WooCommerce needed.

Forms
A simple form builder for contact and quote forms.

• 15 field types (including password and private file uploads), on/off fields, CSS classes, a full-width preview, required fields, email notifications and a thank-you message or redirect.
• Every entry is saved. Mark entries read or spam, and export them to CSV or JSON.
• Quote forms can add a “Request a quote” button to products, with the product filled in.
• Import and export forms and entries between sites.
• Add a form with the “Form” block or [bylt_form id="12"].

Store Vacation (WooCommerce)
Close the store for a holiday or stock count. Set the dates, show a notice across the site, and either pause checkout or keep taking orders with a “ships after” message. It turns itself on and off on schedule and clears your page cache when it changes.

Site Tweaks
The small fixes most stores add as code snippets, as switches: “Order again” on past orders, your own sale badge text (“Special!”), staff paying customer order links, no WooCommerce marketing nags or dashboard clutter, updates and admin notices only for the main admins, safe SVG uploads (every file is cleaned), XML-RPC off, clean upload filenames, password rules, your own email sender name and address, and lighter cart fragments.

Maintenance & Coming Soon
Show visitors a branded “Coming soon” or “Down for maintenance” page while you keep working. Choose which roles still see the site, share a private preview link with clients, allow office IP addresses, and set an end time with a countdown. Maintenance mode tells search engines it’s temporary (503), and the REST API and payment webhooks keep working.

Login Page
Your logo, colours and background on the WordPress login screen. One vague error for a wrong username or password, and a lockout after repeated failed logins on wp-login.php and the My Account login.

Database Cleanup
See how many expired transients, old revisions, auto-drafts, trashed posts, spam comments, orphaned rows, expired WooCommerce sessions and old background-task logs you have, then clean them by hand or every week. Orders, customers and products are never touched.

Built to stay out of the way

• Menus only where you work. Settings share one page under Toolkit → Settings. Work areas such as Forms get their own menu only while they’re switched on.
• Audit log. Password changes, account switches and settings changes are recorded under Toolkit → Audit log.
• Plays well with caching. Toolkit doesn’t cache pages itself. It clears your cache when something visitors see changes: WP Rocket, LiteSpeed Cache, W3 Total Cache, WP Super Cache, WP Fastest Cache, SiteGround Optimizer and Nginx Helper.
• Off means off. A module that’s switched off loads nothing.

BYLTCommerce Pro

BYLTCommerce Pro adds more modules to the same plugin. Its code is not included in this free version; it’s installed when you activate a license, and there’s a 14-day free trial with no card needed. Pro modules include Wholesale, Subscriptions, Memberships, Gift Cards, Smart Coupons, Invoices & Packing Slips, Shipping Tools, Store Locator, Phone Payments and more. See byltcommerce.com.

Everything in the free version keeps working without a license.

External services

BYLTCommerce Toolkit only contacts outside services for the features listed here, and only when you turn them on.

Cloudflare Turnstile (Checkout Protection and Form Protection, when you choose Turnstile)
Visitors’ browsers load the Turnstile script from challenges.cloudflare.com on the protected forms. When a protected form is submitted, your site sends the visitor’s Turnstile token, your secret key and the visitor’s IP address to Cloudflare to confirm they’re human.
Terms of service, Privacy policy

Google reCAPTCHA (Checkout Protection and Form Protection, when you choose reCAPTCHA)
Visitors’ browsers load the reCAPTCHA script from www.google.com on the protected forms. When a protected form is submitted, your site sends the visitor’s reCAPTCHA token, your secret key and the visitor’s IP address to Google to confirm they’re human.
Terms of service, Privacy policy

Freemius (licensing, optional)
BYLTCommerce uses the Freemius SDK for Pro licenses and trials. After you activate the plugin, it asks whether you want to share basic site information (site URL, WordPress and PHP versions, plugins and your admin email) for updates and security notices. Nothing is sent unless you opt in or activate a license, and you can skip it.
Terms of service, Privacy policy