Keygen is the serious player in licensing-as-a-service: a deep API for licenses, machines, entitlements and distribution, cryptographically signed keys, and the polish of a product that has thought hard about every edge case in software licensing. To its real credit, it also publishes its source as a fair-code Community Edition you can self-host.
The hosted pricing is the rub: plans start at $99/month — $1,188 a year, $3,564 over three — which is brutal math for exactly the people who most need licensing: indie developers selling desktop tools. And the self-host escape hatch is a full Ruby application with Postgres and Redis to operate. Keymaster is the small-vendor version: a $49 pay-once license server, one Node process and a SQLite file, issuing ed25519-signed keys your app verifies completely offline.
What Keygen does well
Keygen is genuinely excellent engineering:
- API depth — entitlements, policies, machine management, heartbeats and distribution channels handle licensing models most tools cannot express.
- Cryptographic rigor — signed keys and responses, offline verification, careful documentation of the threat model.
- A fair-code Community Edition — real self-hosting with the actual codebase, not a crippled demo. Rare and commendable.
- Managed reliability — the hosted API is someone else's pager, with uptime your activation flow can lean on.
If you are licensing enterprise software with per-entitlement complexity and need a vendor on the hook, Keygen is the grown-up choice.
Where the subscription model hurts
The pricing inverts the market. $99/month means an indie selling a $49 desktop tool pays for 25 sales a year before licensing breaks even — $1,188/year, every year, for what most small vendors actually use: issue key, verify key, count seats. Keymaster does those three things for $49 once. The self-hosted Community Edition avoids the fee but not the operations: Ruby, Postgres, Redis and their upgrade treadmill, which is heavy infrastructure for a single-vendor licensing server.
There is also a custody argument specific to licensing: with a hosted service, your signing keys and your customer/activation data live with the vendor, and your app's activation path depends on their availability and their continued existence. License keys outlive companies — keys signed by a keypair on your own disk keep verifying forever, no matter what happens to anyone's SaaS.
Keymaster: the pay-once alternative
Keymaster is a $49, one-time purchase. Self-hosted license server: signed keys, seat limits, secure downloads — no platform cut. Keymaster issues KM1-format ed25519-signed keys — self-describing, documented byte-for-byte, verifiable offline with just your public key using the zero-dependency Node and WebCrypto snippets in the repo. The activation API enforces seat limits via machine fingerprints with idempotent re-activation and signed receipts for offline runs; artifacts deliver through 15-minute signed URLs; webhooks are HMAC-signed with retries and a delivery log. Your keypair is generated on first boot and lives on your disk. One Express process, SQLite, $49 once, MIT source.
The source code is MIT-licensed at github.com/bensblueprints/keymaster — free to build and run yourself, forever. Buying the packaged version on Whop gets you the signed installer, 1-click setup and updates. Either way, there is no account, no telemetry and no renewal date.
Head to head
| Keymaster | Keygen | |
|---|---|---|
| Price | $49 once | from $99/mo hosted |
| Cost over 3 years | $49 | ~$3,564+ |
| Where your data lives | Your machine / your server | Keys & activations in their cloud (CE self-host = Ruby+Postgres+Redis) |
| Usage limits | None — unlimited use | Licenses & usage metered by tier |
| Works offline | Yes | CE self-host: yes |
| Source code | MIT, on GitHub | Fair-code CE available |
Who should stay with Keygen
Stay with Keygen if you need entitlement-level licensing complexity, compliance requirements demand a managed vendor, or the Community Edition's depth is worth running the Postgres/Redis stack. Keymaster is deliberately simpler — keys, seats, downloads, webhooks — and does not try to model enterprise policy graphs.
Switch if you sell desktop apps, plugins or tools and your licensing needs are the universal ones: signed keys, offline verification, seat limits, signed download links. That is a $5 VPS job, and it should cost $49 once, not $99 a month.
Making the switch
Step 1 — Buy once on Whop. One-time $49 for the packaged, ready-to-run version with a Windows installer and priority support.
Step 2 — Deploy and integrate. docker compose up on a $5 VPS, then drop the 20-line verification snippet into your app with your public key embedded at build time.
Step 3 — Issue keys, ship builds. Issue or bulk-issue licenses from the dashboard, wire the webhook into Stripe or Whop, and let customers download through expiring signed URLs.
Common questions
Is it really free on GitHub?
Yes — MIT source at github.com/bensblueprints/keymaster, always. $49 buys the packaged installer, updates and priority support. We dogfood it: the onetime-suite's own premium tiers run on Keymaster.
Can offline validation catch revoked keys?
No — and the docs say so upfront. An offline check proves a key is authentic and unexpired; it can't see revocations or seat counts. The shipped snippets show the recommended hybrid: verify offline instantly, check in online periodically, apply a grace period.
Why not just use Keygen?
If you want managed infrastructure, multi-region uptime and someone else holding the pager, Keygen is a solid product — that's what $99+/month buys. Keymaster is for sellers who'd rather own the keypair, the data and the bill: one Node process and a SQLite file on a $5 VPS.
The bottom line
Subscriptions make sense when a service does ongoing work for you — hosting, syncing, multi-region infrastructure, human labor. They make much less sense when the work happens on your own hardware and the monthly bill is just a toll booth. Keymaster is our bet that for this job, most people are better served owning the tool: $49 once, against Keygen's $99/mo entry tier, Keymaster pays for itself in 15 days. Against Gumroad's 10% cut, it pays for itself on your first ~$500 of sales.
Keymaster is part of OneTimeSuite — 56 desktop and self-hosted apps built on the same principle: your hardware does the work, so you should not pay rent on it. Every app is a one-time purchase with MIT-licensed source on GitHub, no accounts and no telemetry. Want everything at once? OneTimeSuite Complete bundles the whole suite for a single flat $997.
Try Keymaster — $49, one time
Signed installer on Whop, or build it free from the MIT source. Your call.
Related comparisons: Gumroad alternative — or browse the whole pay-once suite.