Hardware-locked
The first activation binds a key to a hashed machine ID. Other computers are refused — sharing a key simply stops working.
Foliox License is the software license key system for developers: generate keys, lock each one to a single computer, set expiry, revoke instantly and verify over a signed API — with e-mails to your customers built in.
Built for developers who ship their own tools and want licensing that is strict with pirates and painless for customers.
The first activation binds a key to a hashed machine ID. Other computers are refused — sharing a key simply stops working.
Every answer, including “no”, carries an Ed25519 signature your app verifies offline. A fake license server gets nowhere.
Refund, chargeback or leak? Revoke a key and the software stops at its next check. Restore it just as fast.
Never expire, N days after activation, or a fixed date. Extend any key later in one click.
Every tool you sell in one dashboard, each with its own keys, defaults and snippet.
Buyers check their own license and request a device reset — you approve in one click.
Pinged on Discord or Slack when a key roams between devices or a customer needs help.
Scoped API tokens let checkout webhooks and bots create keys — never your password.
The key on creation, a reminder 2 days before expiry, and a notice when it ends.
One-click sign-up with Google or Discord, and two-factor authentication in a minute.
The first 20 customers get 40% off their first plan. Enter the code on the Plans page when you upgrade.
EARLY4020 spots leftFrom a free account to a working license check with HWID lock, step by step.
Move your products and customers over without breaking the tools they already run.
The Free plan has no card and no trial clock. Paid plans add capacity and insights — license checks are never metered.
Everything you need to protect your first tools — no card, no trial clock.
No card. No trial clock.
Start freeFor your first paying customers — more keys, device resets, a small price.
or $40 / year — save 17%
Get StarterFor developers selling real software.
or $90 / year — save 17%
Get ProFor studios and resellers running at scale.
or $290 / year — save 17%
Get BusinessPrices in US dollars, paid with UPI (Google Pay, PhonePe, Paytm), cards, netbanking or cryptocurrency. Nothing renews by itself. Compare every plan →
Generate keys in the dashboard — or from a script with an API token. Pick the product, validity and customer.
Your app sends the key and a hashed machine ID. The server binds them and starts the expiry clock.
Each start-up re-checks the signed answer. Revoked, expired or moved to another device? The app knows straight away.
Drop-in clients handle the machine ID, activate-then-verify, signature checking and the offline grace period, so you only write if not result.valid.
Bought a key? Paste it to see whether it is active, when it expires and whether it is linked to a computer. Changed computers? Ask for a reset right here — the owner approves it.
Your device ID and personal details are never shown here.
Your dashboard is locked down as hard as the client side is signed.
Add an authenticator app to your account. Sensitive actions ask for your password (and a fresh code) again.
Sessions expire when idle, live server-side, and can be signed out from any device in one click.
Every sign-in, failure and change is logged with who, where and from what device.
Ban leaked devices or abusive addresses. Brute force is throttled per account and per network.
Automation gets a token that can only do what you allow, pinned to your IPs, with a hashed secret.
Your products, keys and customers are private to your account — isolated from every other account, with secrets encrypted at rest.
An honest note: no client-side check can be made 100% unbreakable — a determined attacker with full control of a machine can patch any program. What this does is stop casual sharing and piracy: the server is the only authority, answers can’t be forged, and a key works on exactly one device.
Your software embeds this key and rejects any answer not signed by the matching private key.
loading…loading…Foliox License is a software license key system. You create an account, add your products, generate license keys, and your app checks them over a signed API. Each key locks to one device by default — or can be a public key that many users share — can expire, and can be revoked or extended instantly. Your customers can be e-mailed their key automatically.
Yes. The Free plan needs no card and has no trial clock. It includes HWID device locking, Ed25519-signed responses, all four SDKs, the customer license-check page, automatic customer e-mails, and two-factor sign-in — with limits on the number of products, keys, tokens and monthly customer e-mails. Upgrade only when you outgrow it.
The first time a key is activated, your app sends a SHA-256 hash of a stable machine ID. The server binds the key to that hash. Any other computer is refused, so sharing a key stops working. On paid plans a key can be allowed on up to 3, 5 or 15 devices (Starter, Pro, Business). If a customer gets a new computer they can request a device reset from the check page, which you approve from your dashboard (device resets are included from the Starter plan up).
The SDKs cache the last signed “valid” answer and keep your app running for up to 72 hours offline. After that they fail closed. The cache is signed, so it can’t be edited by hand.
Yes, if you add their e-mail address when you create the key. They receive the key and its validity straight away, a reminder two days before it expires, and a notice when it has expired. You can switch this off, and Business plans send it without any Foliox branding.
Any program running on a machine its user fully controls can, in theory, be patched. Signed answers, device binding and instant revocation make casual sharing and key generators pointless — which is the realistic goal, and we say so plainly rather than promising the impossible.
Ready-made SDKs for Python, Node.js, Go and Rust, plus a plain REST API you can call from anything else. Signatures are standard Ed25519, so verifying them is a few lines in any language.
Starter, Pro and Business can be paid with UPI (Google Pay, PhonePe, Paytm), cards, netbanking or cryptocurrency through the payment provider’s secure checkout. Your plan switches on automatically as soon as the payment confirms. Nothing renews by itself — we e-mail you before a plan ends, and if you don’t renew you simply return to Free.
Your products, keys and customers are private to your account and isolated from every other account. Secrets are encrypted at rest, sign-in supports two-factor authentication, and you can export your keys or delete your account and everything in it from Settings.
Yes. Create a scoped API token (for example “create keys only”), then call the automation API from your checkout webhook or bot. Tokens can be limited to specific permissions and IP addresses, and revoked in one click.
Create a free account, generate your first keys and drop in an SDK — it takes a few minutes.