Stops casual key sharing
A leaked key only works on the original machine. Forwarding the activation code to a friend does not produce a working copy.
Hardware-locked keys
One license,
bound to one machine.
XLS Padlock computes a one-way System ID from a configurable set of machine identifiers (CPU, disk, MAC, and, with the 2026 enhanced fingerprint, the Windows installation ID), then binds every activation to it. A leaked key only works on the PC it was activated on. Customers can deactivate and move their license to another machine; you can block a key through online validation.
Four advantages over an unbound key.
You decide how many machines
With the online activation kit you choose how many activations each license allows, one machine, two, or more. The compiled EXE enforces the limit per System ID.
Deactivate and transfer
Customer deactivates on one PC, then re-activates on another with a fresh key. With the online activation kit the whole exchange runs automatically; otherwise it uses a deactivation certificate.
Block a refunded key
After a refund, set online validation to blacklist the key. On its next validation check, the workbook invalidates that key and stops opening until a new one is entered.
From key to bound license, end to end.
- 01
Generate a hardware-locked key
Issue the activation key from your dashboard, your WooCommerce store, or your stand-alone key generator. Mark it as hardware-locked.
- 02
Customer activates on their machine
The compiled EXE reads the machine fingerprint. The customer pastes the matching activation key, or, with online activation (optional), the workbook fetches it from your server, which validates the request and can sign its response with Ed25519 so it cannot be forged in transit.
- 03
License only works on that PC
On startup, the EXE recomputes the fingerprint and compares. If the fingerprint matches, the workbook unlocks. If not, the EXE refuses to run.
- 04
Move or block at will
Customer deactivates on the old machine, then re-activates on the new one with a fresh key. To stop a leaked key, set online validation to blacklist it on its next check.
Stable machine identifiers hash into one System ID.
XLS Padlock hashes a configurable set of stable Windows machine identifiers into one System ID. You choose which components are used, and because the System ID is a one-way hash, the underlying serial numbers are never exposed in it.
CPU identifier
Hard disk serial
Network adapter MAC address
Windows installation ID (registry MachineGuid)
What customers ask about hardware locking.
-
What if a customer changes their hard disk?
It depends on the algorithm. With the enhanced hardware fingerprint (XLS Padlock 2026 and later), the Windows installation ID is read from the registry and stays stable across disk swaps and in-place Windows updates, so the key keeps matching. Only a clean Windows reinstall regenerates it. The legacy algorithm scans the disk volume, so a swapped disk or reinstall can require a re-activation, which the customer performs by deactivating and obtaining a new key. Note too that a changing MAC address (switching between Wi-Fi and 4G) can invalidate a key that includes the MAC.
-
Can I run hardware locking offline?
Yes. You can issue keys that bind to a System ID without ever talking to your activation server: the customer sends you their System ID, you generate the matching key. The check happens on the customer's machine. Online activation and validation are optional.
-
What about virtual machines?
XLS Padlock computes the System ID from the machine attributes it reads, whether the machine is physical or virtual. Inside a VM the System ID stays stable as long as the underlying virtual hardware identifiers do not change. There is no dedicated VM detection or VM blocking feature.
-
Is the System ID reversible?
No. The System ID is a one-way hash of the selected machine attributes (SHA-256 with the 2026 enhanced fingerprint, MD5 in the legacy algorithm). It is shown as a short XXXX-XXXX-XXXX code and cannot be reversed back into the underlying serial numbers.
Make activation keys with or without XLS Padlock.
Stand-alone key generator
Available to registered XLS Padlock customers, so you can create activation keys for your protected workbooks without running Excel or XLS Padlock.
Download the key generatorKey generator PHP SDK
A free online web application and its PHP source. Run it on your own website to generate and deliver activation keys automatically.
Get the PHP SDKGo further with online activation
XLS Padlock can automate key delivery entirely. Even for hardware-locked keys, the secure workbook talks to your website and downloads the activation key from the server instead of prompting the end user.