Server-side access control for desktop, web, and mobile software.

Combine license keys, user accounts, HWID locks, sessions, and quotas in one API. Clients authenticate. PureAuth decides.

Create an application Read the API

Licenses

Masked keys, bulk generate, expiry, activations, ban/pause.

Sessions

Server-side sessions with kill-one / kill-all.

HWID

Device binding, reset limits, and hardware login.

Variables

Global and per-user values without shipping a rebuild.

Webhooks

Discord, Telegram, and HTTPS — secrets stay on the server.

Teams

Owner, admin, manager, support, reseller with scoped API keys.

What PureAuth is not

PureAuth enforces licenses, sessions, and device limits on the server. It is not an obfuscator, packer, or anti-debug SDK. Protect your binary separately; keep every access decision here.