Hybrid

Hybrid verifies locally on every start and checks with DYCRYPT on a schedule. It is the recommended default for most desktop and server applications.

Why use Hybrid

• Local verification keeps startup fast and resilient.
• Scheduled checks carry revocation and installation visibility back to the application, and each answer is signed by the product’s key so it cannot be faked.
• The signed maximum offline window prevents indefinite disconnected use.
• A temporary network failure does not stop the application immediately.

When the offline window closes without a successful check, the SDK returns STALE until it reconnects.

Choose activation per licence

• Online activation: the first successful check binds the licence. This is the normal path and requires no fingerprint during issuance.
• Offline activation: the customer sends you a fingerprint first and the licence ships pre-bound. Use this when the install machine cannot reach DYCRYPT during setup.

Offline activation changes only the first binding. The application must still perform later checks within the signed window.

Application integration

Call check() on startup when possible and on the signed interval afterward. If your user experience starts with local verify(), schedule check() immediately in the background and do not ignore STALE.

A renewed licence answers check() with valid: false and status: "ACTIVE" — a new file exists even though the old one no longer verifies. If the product has turned on self-service fetch, call fetchLatest() at that point rather than asking the customer to install a new file by hand. See the licence check API for the endpoint; this applies to Hybrid licences activated either way, online or offline.

Test these paths before production:

1. online activation on the intended machine;
2. copying the licence to a second machine;
3. an issuer that answers ACTIVE but cannot sign it — point the issuer URL at a local stub and confirm the licence stays STALE;
4. temporary network failure inside the offline window;
5. STALE after the window;
6. reconnection and recovery;
7. revocation and machine release.