Everything KeyStack ships, in one place.
The boring infrastructure plumbing for selling licensed software — done well, on day one.
License lifecycle
Issue, validate, freeze, extend — without leaving the dashboard
Every action a real licensing system needs, built first-class. No more juggling spreadsheets, email forwards and one-off scripts.
Generate
Crockford Base32 keys with HMAC-SHA256 checksums.
Extend
Push expiry dates forward in bulk or per customer.
Freeze
Pause a license without losing its history or activations.
Revoke
Hard-revoke compromised keys; revocations propagate instantly.
Public API
Built for real production traffic
HMAC-signed REST endpoints, Redis-cached validation, replay protection, per-app keys and request scopes. Designed for cold-start clients and high-traffic services alike.
HMAC-signed
Every request is signed and timestamped — replay attacks blocked.
Low p99
Validation hits Redis first; falls back to PG on cache miss only.
Per-app keys
Rotate keys without bringing your apps down.
Scoped
Each key is restricted to a specific app + permission set.
Billing
Stripe-native, or bring your own
Connect Stripe in two clicks and KeyStack mints keys as orders complete. Prefer a custom checkout? Issue keys via the API and we keep the books straight.
Stripe webhooks
checkout.session.completed → license created → email sent.
Customer link
Every key is tied to a customer record with full metadata.
Plans
Define license plans with seats, duration and feature flags.
Reconcile
Orders, refunds and disputes are mirrored against keys.
Security
A foundation, not a feature
We don't bolt security on. It's how the product is built — from password hashing to multi-tenant isolation to encryption at rest.
Argon2id + TOTP
OWASP-recommended hashing and frictionless 2FA.
AES-256-GCM
Secret plaintexts are never stored at rest.
Tenant isolation
organizationId is auto-injected by a Prisma extension.
Audit log
Every mutating action is recorded and exportable.
Dashboard
A control panel your team will actually open
A clean white-and-blue design with the right defaults, real keyboard shortcuts and motion that earns its keep. No dark mode tax, no marketing fluff.
Per-app boards
Each application has its own keys, plans and audit trail.
Modern UI
Built with React 19, Tailwind 4 and a careful, light theme.
Team roles
OWNER · ADMIN · SUPPORT · READ_ONLY, enforced everywhere.
Webhooks UI
Configure, test and replay events without leaving the app.
Ready to ship keys without the duct tape?
Start free for 1 app and 50 active licenses. Upgrade only when you grow.