Two signatures,
two separate jobs.
SEO Neurons uses public-key signatures to bind server leases to a specific desktop installation without storing your raw key in the app.
Device identity
On first use, the desktop app creates an Ed25519 key pair. Its private key is protected by Windows DPAPI. Activation, refresh, and deactivation requests include a fresh nonce and timestamp and are signed by that device.
Offline lease
After the server validates the account, license, limit, and device signature, it returns a separate Ed25519-signed lease. The app verifies that lease with an embedded public key and can operate offline until the lease expires, for no more than seven days.
What the server stores
License lookup uses a keyed one-way hash. The key is also encrypted for the password-gated portal reveal flow. Audit events store reduced identifiers rather than raw IP addresses or license keys.
Revocation behavior
A revoked or expired license cannot start a new crawl after the app reconnects. If a crawl is already running, the app preserves work and allows a safe finish, pause, or export before blocking the next crawl.