Gumroad deserves enormous credit for what it made possible: anyone can sell a digital product in an afternoon. Checkout, VAT handling, file delivery, license keys, an audience discovery feed — the entire commercial plumbing of selling software, with zero upfront cost. For a first product, that trade is often exactly right.
But look at the trade as you grow: Gumroad's cut is roughly 10% plus a fixed fee per sale. Sell $10,000 of software a year and you hand over about $1,000 — every year, scaling with your success, forever. Its licensing is also the shallow end: server-validated keys with no offline verification and no real seat management. Keymaster attacks the piece you can actually own: a $49 self-hosted license server with cryptographically signed keys, seat limits and signed download delivery — pair it with a flat-fee processor like Stripe and the math changes completely.
What Gumroad does well
Gumroad's value is real, especially early on:
- Zero to selling in an hour — checkout, payments, delivery and receipts with no code and no monthly fee.
- Merchant-of-record duties — it handles VAT/sales tax across jurisdictions, genuinely painful to do alone.
- Built-in license keys — basic, but present, with an API your app can ping.
- Discovery and audience features — email blasts, a marketplace feed, affiliate tooling.
If you are validating your first product and revenue is near zero, 10% of almost nothing is a fair price for all of that plumbing.
Where the subscription model hurts
The percentage never stops scaling. 10% + 50 cents on every sale means your platform bill grows in lockstep with your success: ~$1,050/year at $10k of sales, $5,000+/year at $50k — compare Stripe's roughly 3% and Keymaster's one-time $49. The better your product does, the worse the deal gets, and unlike a subscription you cannot even cap it. Over three years at modest $10k/year revenue, Gumroad's cut is around $3,000.
The licensing itself is also thin: Gumroad keys are verified by calling Gumroad's server — no offline validation (your app breaks where the internet does not reach), no machine fingerprints or real seat enforcement, and the whole scheme lives or dies with your Gumroad account. Your customers, your keys and your delivery all sit on a platform that has changed pricing before and can again.
Keymaster: the pay-once alternative
Keymaster is a $49, one-time purchase. Self-hosted license server: signed keys, seat limits, secure downloads — no platform cut. Keymaster is the piece of the stack worth owning: ed25519-signed license keys your app verifies fully offline (zero-dependency snippets included), an activation API with machine-fingerprint seat limits, product/version management with artifacts delivered through 15-minute signed expiring URLs, HMAC-signed webhooks, a customer portal at /license/
The source code is MIT-licensed at github.com/bensblueprints/keymaster — free to build and run yourself, forever. Buying the packaged version on Whop gets you the signed installer, 1-click setup and updates. Either way, there is no account, no telemetry and no renewal date.
Head to head
| Keymaster | Gumroad | |
|---|---|---|
| Price | $49 once | 10% + 50¢ per sale |
| Cost over 3 years | $49 | ~$3,000 at $10k/yr sales |
| Where your data lives | Your machine / your server | Their platform holds customers, keys & files |
| Usage limits | None — unlimited use | Cut scales with your revenue; server-only license checks |
| Works offline | Yes | No |
| Source code | MIT, on GitHub | Source-visible (restrictive license) |
Who should stay with Gumroad
Stay with Gumroad if you are pre-revenue or near it, if merchant-of-record tax handling is a hard requirement you will not solve another way, or if its discovery feed genuinely drives sales for you. Keymaster does licensing and delivery — you still need a payment processor (Stripe plus a webhook that calls Keymaster's issue endpoint; the recipe is in the docs).
Switch when the math flips — for most sellers that is around a few thousand dollars a year in revenue. At that point the 10% cut is your largest software expense, and replacing it with Stripe fees plus a $49 one-time license server is the highest-ROI change you can make.
Making the switch
Step 1 — Buy once on Whop. One-time $49 for the packaged, ready-to-run version with a Windows installer and priority support.
Step 2 — Deploy and integrate. docker compose up on a $5 VPS, then drop the 20-line verification snippet into your app with your public key embedded at build time.
Step 3 — Issue keys, ship builds. Issue or bulk-issue licenses from the dashboard, wire the webhook into Stripe or Whop, and let customers download through expiring signed URLs.
Common questions
Is it really free on GitHub?
Yes — MIT source at github.com/bensblueprints/keymaster, always. $49 buys the packaged installer, updates and priority support. We dogfood it: the onetime-suite's own premium tiers run on Keymaster.
Can offline validation catch revoked keys?
No — and the docs say so upfront. An offline check proves a key is authentic and unexpired; it can't see revocations or seat counts. The shipped snippets show the recommended hybrid: verify offline instantly, check in online periodically, apply a grace period.
Why not just use Keygen?
If you want managed infrastructure, multi-region uptime and someone else holding the pager, Keygen is a solid product — that's what $99+/month buys. Keymaster is for sellers who'd rather own the keypair, the data and the bill: one Node process and a SQLite file on a $5 VPS.
The bottom line
Subscriptions make sense when a service does ongoing work for you — hosting, syncing, multi-region infrastructure, human labor. They make much less sense when the work happens on your own hardware and the monthly bill is just a toll booth. Keymaster is our bet that for this job, most people are better served owning the tool: $49 once, against Keygen's $99/mo entry tier, Keymaster pays for itself in 15 days. Against Gumroad's 10% cut, it pays for itself on your first ~$500 of sales.
Keymaster is part of OneTimeSuite — 56 desktop and self-hosted apps built on the same principle: your hardware does the work, so you should not pay rent on it. Every app is a one-time purchase with MIT-licensed source on GitHub, no accounts and no telemetry. Want everything at once? OneTimeSuite Complete bundles the whole suite for a single flat $997.
Try Keymaster — $49, one time
Signed installer on Whop, or build it free from the MIT source. Your call.
Related comparisons: Keygen alternative — or browse the whole pay-once suite.