DEV Community

FileFreight
FileFreight

Posted on

License keys for digital downloads: what they actually stop, and what they don't

Posted by the FileFreight team. We build a flat-rate delivery tool for digital sellers: secure download links, per-buyer PDF stamping, and license keys. This is a practical guide to what license keys do in the real world — including the limits most vendors don't mention.

If you sell software, plugins, fonts, presets, sample packs, or anything else a buyer "activates," you've probably been told license keys "prevent piracy." They don't — not in the way that sentence implies. What they do is narrower, more specific, and still very much worth having. Here's the honest version.

What a license key actually is

A license key is a per-buyer credential issued at purchase. Instead of "anyone with the file can use it forever," the product checks: was this key issued, is it still valid, and how many times has it been activated? That check turns a one-time sale into an ongoing, revocable permission — and that change is where all the value (and all the limits) come from.

What license keys genuinely stop

1. Casual link-sharing. The most common "piracy" for small sellers isn't a crack — it's a buyer pasting a download link or a key into a group chat, a forum, or a Discord. A key tied to one buyer, with a limited number of activations, makes that share mostly useless: the second or third person hits a wall, and the buyer knows the key traces back to them.

2. Post-refund reuse. Without keys, a refunded buyer keeps a fully working product. With keys, a refund can revoke the key — the permission ends when the money goes back. (In FileFreight, this is automatic: when Stripe reports a refund, the buyer's download entitlement and license keys are revoked, and refunded buyers keep no access.)

3. One purchase quietly covering a whole team. If you sell per-seat — a plugin for one site, a preset pack for one workstation — activation limits are what make "one seat" real instead of a polite suggestion in your terms. A key that activates, say, twice (laptop + desktop) serves the honest buyer perfectly and stops the office-wide install.

4. The slow leak you never see. Keys give you a record: who activated, when, and how often. A key suddenly activating in bursts is a signal you can act on — revoke that one key — instead of discovering a shared copy months later with no idea where it came from.

What license keys don't stop

Be clear-eyed about this part, because overselling protection leads to bad decisions:

Determined piracy. Anyone skilled and motivated can strip a key check out of software, or share a copy that never checks. Keys raise the effort above "free and instant" — that's the actual mechanism. They filter out the casual 95%, not the committed 5%.

Sharing of the file itself. A key protects activation, not the bits. If your product works fully without ever validating, the key is decoration. Keys only matter where the product (or the download entitlement behind it) actually checks. This is also why keys pair well with expiring, per-buyer download links: the link controls who can get the file, the key controls who can keep using it.

Account sharing within the limit. If a key allows three activations, three people can share it and you'll never know. Set limits to what an honest buyer needs — no more.

How activation limits and revocation work in practice

  • Issuance: a fresh key is generated per paid order, delivered with the download. In FileFreight, you enable keys per product and a key is issued automatically with every paid order; your software validates a key with a single API call (POST /api/licenses/validate), and you can revoke any key at any time from the dashboard.
  • Activation limits: each key carries a maximum number of activations (devices, sites, installs). Pick the number from your license terms — one seat means a small number, with headroom for a buyer's second machine so support stays quiet.
  • Revocation: revoking a key makes the next validation fail. Use it for refunds, chargebacks, and proven sharing. Because validation is a live check, revocation takes effect without shipping an update or chasing copies.
  • Refund auto-revoke: tie revocation to the payment event, not to a manual chore you'll forget. A refund that leaves a working key behind is a free product with extra steps.

Why this matters now

License keys used to be a "big platform" feature. They still aren't universal: Fileflare, a Shopify digital-delivery rival, lists native license keys for its own product as "coming Dec '26" on its comparison page (fileflare.io/compare, checked October 13, 2026; the page says it was last updated September 2026). In other words, a seller choosing tools today can easily end up on a platform where keys are a roadmap item, not a feature — while the sharing problem exists from the first sale.

If keys matter to your product, verify they're live — not "coming" — before you build on a platform, and run one test purchase to watch a key issue, validate, and revoke.

The honest caveats about us

  1. FileFreight is not a merchant of record. We do not handle sales tax or VAT for you: payments go straight to your own Stripe account, so tax responsibility stays with you. If your current platform remits digital VAT for you, that service is worth real money — price it before moving.
  2. No automatic importer yet. Migration is manual — which is why the first 20 sellers get free white-glove help: products, files, and license keys rebuilt by hand within 48 hours.
  3. We're not a Shopify app. Every product gets a standalone buy link you can paste anywhere; we don't require Shopify.
  4. Delivery-only. No marketplace, no storefront, no discovery. We deliver what you sell; bringing buyers is still your job.

The short version

License keys stop casual sharing, end post-refund reuse, make per-seat terms enforceable, and give you a revoke button that actually works. They don't stop determined piracy or file sharing, and they never will. For most small sellers, the casual cases are the ones costing money — and those, keys handle well.

That's the trade FileFreight is built on: FileFreight — Free plan is $0 + 5% per sale; Pro is $19/month flat with 0% per-sale fees, expiring download links, per-buyer PDF stamping, and license keys with revocation and refund auto-revoke.


Feature claims about FileFreight are from getfilefreight.com, checked October 13, 2026. The Fileflare comparison claim is from fileflare.io/compare, checked the same day.

Top comments (0)