License Key Generator & Validator
Generate secure, human-readable software license keys, then validate their format and checksum — entirely in your browser. No signup, no tracking of your keys.
Generating keys is the easy 5%.
The hard 95% is validating them at the edge for every user worldwide, binding keys to domains and devices, revoking instantly, handling offline activation, and metering usage. That is what Traffic Orchestrator does — drop-in license validation on Cloudflare's edge, 12 SDKs, Stripe-ready.
Start free →How software license keys actually work
A license key is a token you issue to a paying customer and later verify. Good keys are unguessable (generated from a cryptographically secure RNG, not a counter), readable (grouped, no ambiguous characters), and self-checking (a checksum character rejects typos before they reach your server). This tool does all three. Production systems then add server- or edge-side validation, device and domain binding, expiry, and revocation.
Frequently asked questions
Are the keys stored or sent anywhere?
No. Generation and validation run entirely in your browser using crypto.getRandomValues. Nothing is transmitted or logged. You can disconnect from the internet and it still works — view source to verify.
Can I use these keys in production?
Yes — the keys are cryptographically random and safe to issue. But a key is only as strong as its validation: you still need a service that checks, binds to a domain or device, expires, and revokes them. That is what Traffic Orchestrator provides.
Why Crockford Base32?
It omits ambiguous characters (0/O, 1/I/L) so customers do not mistype a key read over the phone or copied from an email, and it supports a checksum symbol for typo detection.
What does the checksum do?
The optional mod-37 check character is derived from the rest of the key. If a customer mistypes one character, the checksum will not match — letting you reject the typo instantly, before it ever reaches your server.