Quick answer
Yes — Keymaster is a one-time-purchase alternative to Keygen. It costs $129 once, while Keygen runs from $99/mo — about $1,188 per year, every year. Ed25519-signed license keys your apps verify offline, seat limits, signed downloads & webhooks. It is for people who want the job done on their own hardware without a renewal date — not for teams that live inside Keygen's ecosystem.
The verdict
Switch to Keymaster if you are an individual or small team paying Keygen from $99/mo for work your own machine can do. Against Keygen's $99/mo entry tier, Keymaster pays for itself in about 6 weeks. Against Gumroad's 10% cut, it pays for itself on your first ~$1,300 of sales.
Stay with Keygen if your workflow depends on its integrations, you need enterprise features (SSO, admin controls, SLAs), or your team is large enough that per-seat collaboration tooling is worth the bill. Keymaster does not try to replicate those.
Head to head
| Keymaster | Keygen | |
|---|---|---|
| Price | $129 once | from $99/mo ($1,188/yr) — Gumroad: 10% + 50¢/sale |
| Cost at $10k/yr in sales | $129 total | Keygen $1,188/yr · Gumroad ~$1,050/yr |
| Your own signing keypair | Yes — generated on your box | No — managed for you |
| Offline validation | Yes, ed25519 | Yes |
| Seat limits + fingerprints | Yes | Yes |
| Signed expiring downloads | Yes (15-min TTL) | Yes |
| Self-hosted / your data | Yes — SQLite on your VPS | No |
| Source code | MIT, on GitHub | Closed (hosted) |
| 5-year cost | $129 | $5,940 |
Where Keygen still wins
- Ecosystem and integrations. Established tools accumulate years of third-party integrations, templates and add-ons. If your workflow is wired into Keygen's ecosystem, switching means rebuilding that plumbing — a real cost.
- Team and enterprise features. Shared workspaces, granular permissions, SSO, audit logs and a vendor to call when something breaks — that is what the higher subscription tiers actually buy, and a pay-once app does not come with it.
- Familiarity and hiring. Keygen is the name people already know. Onboarding a team onto a tool nobody has used before takes time the subscription never charges for.
Where Keymaster wins
- Price, permanently. $129 once versus $1,188/yr for as long as you use it. There is no renewal, no seat count and no tier gate.
- Ed25519-signed keys. KM1.
. format — self-describing, verifiable offline with just the public key. The keypair is generated on first boot; you own it. - Seat limits & fingerprints. Activation API with machine fingerprints, idempotent re-activation, deactivate to free a seat, signed activation receipts for offline runs. Stable, versioned /api/v1.
- Offline validation snippets. Zero-dependency Node and browser/WebCrypto verifiers ship in the repo, and the key format is documented byte-for-byte so you can port it to any language.
The math
Against Keygen's $99/mo entry tier, Keymaster pays for itself in about 6 weeks. Against Gumroad's 10% cut, it pays for itself on your first ~$1,300 of sales.
- After 1 year: Keymaster has cost you $129 total — Keygen has cost $1,188.
- After 3 years: Keymaster is still $129 — the subscription is at $3,564.
- After 5 years: Keymaster is still $129 — the subscription is at $5,940.
Common questions
Is it really free on GitHub?
Yes — MIT source at github.com/bensblueprints/keymaster-mvp, always. $129 buys the packaged installer, updates and priority support. We dogfood it: the onetime-suite's own premium tiers run on Keymaster.
Can offline validation catch revoked keys?
No — and the docs say so upfront. An offline check proves a key is authentic and unexpired; it can't see revocations or seat counts. The shipped snippets show the recommended hybrid: verify offline instantly, check in online periodically, apply a grace period.
Why not just use Keygen?
If you want managed infrastructure, multi-region uptime and someone else holding the pager, Keygen is a solid product — that's what $99+/month buys. Keymaster is for sellers who'd rather own the keypair, the data and the bill: one Node process and a SQLite file on a $5 VPS.
What happens if I lose my signing key?
Back up data/keys/signing.pem — seriously. Your keys verify against that keypair; lose the private key and you can never issue new keys that pass validation in apps you've already shipped.
Try Keymaster — $129, one time
Or get Keymaster plus every other app in the suite: the OneTimeSuite bundle is currently $97, one time.