Bind Devices With HWID
Tie desktop licenses to an application-scoped fingerprint. Set device limits and reset bindings when hardware changes.
License your desktop apps and web domains from one private workspace. Bind devices, issue keys, and stay in control of who gets access.
/api/v1/license/validate{
"application_id": "app_your_application",
"session_token": "your_session_token",
"hwid": "your_stable_device_fingerprint"
}Bind a license to a stable device fingerprint, then revalidate before protected work.
Read The API DocsHandle access from one workspace, with clear rules for your applications and the people using them.
Tie desktop licenses to an application-scoped fingerprint. Set device limits and reset bindings when hardware changes.
Choose the exact hostnames a web license can use. Keep the private application key on your trusted server.
Generate keys, pause access, resume remaining time, and revoke licenses. Existing sessions are checked against current state.
Included loader examples check status every five seconds by default and stop protected work on denial or connection failure.
Review activations, resets, administrator actions, and API activity. Understand access decisions from the same panel.
Self-host the PHP and MySQLi backend, inspect the included clients, and integrate through a straightforward JSON API.
Start with an included client or loader example. Desktop and trusted web integrations follow the same licensing lifecycle.
Choose your language. Keep the API contract.
Choose desktop HWID binding or web domain locking. Keep each product's rules in its own application.
Set the customer, expiry, device limit, or allowed domains. Save the full license key when it is shown.
Activate through a loader example, then validate regularly before allowing protected operations.
At the next online check. The included examples use a five-second interval and a three-second request timeout. A denied or failed check blocks subsequent protected work; keep already-running work short or interruptible.
Your application reports a stable, application-scoped device fingerprint. The service matches it to the license's device bindings. HWID is a client identifier, not hardware attestation; it can change after a reinstall or hardware migration.
Your trusted server sends its configured hostname and private application key. The hostname must match the license's exact allowlist. Keep that key out of browser code, and do not treat an incoming Host or Origin header as proof of entitlement.
The admin panel includes the API reference and language examples. Open The Documentation, or Contact Coder Zorc on Telegram for project questions.
Open your workspace, or get in touch about Obsidian Auth.