Guide
Roblox script licensing explained
A license is a server-checked grant. Keys, HWID, expiry, and Discord mapping are how that grant is shaped.
Published 2026-08-21
What is Roblox script licensing?
Licensing is access control for a client-run script. Instead of emailing Lua, you issue a key (or an ad/Discord grant that creates one). The runtime asks KeyForge whether that grant is still good.
How does Roblox script licensing work?
- You create a key bound to a project/script
- The user sets the key and runs your loader
- KeyForge checks status, expiry, HWID, execution caps, and script match
- On success, the protected payload is delivered
- Heartbeat / session rules keep that session from living forever
License keys
Keys can be lifetime, daily, weekly, or custom duration. You can cap executions and attach a Discord user. KeyForge also supports key batches for selling many serials at once. Starter includes 50 keys; Basic 1,000; Creator 2,500; Scale and Enterprise are unlimited.
User and device binding
After the first successful run, a key can bind to a hardware/device identifier (HWID). A different machine then fails with a mismatch until you reset HWID. This is script-key binding, not the website account-signup lock.
Expiration
Timed keys start according to your key type (often on first redeem/auth for manual keys). Expired keys fail authentication. You can add time to a valid key from the dashboard.
Revocation
Revoke when a key is shared or a chargeback happens. Custom Lua GUI clients surface KEY_REVOKED when the grant is dead. Revocation is the main commercial control you have after a leak.
Implementation
Default path: KeyForge loader + key. Creator/Scale/Enterprise can use a custom Lua GUI SDK that calls verify/load APIs while KeyForge still performs the checks. Do not embed API secrets in the public script.
Security considerations
- Licensing authenticates. It does not hide every instruction from a dumper.
- HWID can be spoofed in hostile executors. Treat it as a speed bump, not a vault.
- PlaceId locks stop the same key from being a universal hub if you configured games.
Related: protect a script and sell without shipping source.
What is Roblox script licensing?
It is a grant that says a specific key, user, or device may receive your protected build. The loader checks that grant on KeyForge before delivery.
How can developers revoke script access?
Mark the key revoked in the dashboard or through your Discord tools. The next authentication fails. Revocation does not delete files already saved on a machine.