Device protection and account binding
ExtraExecutor 2.11.6 binds desktop access to one Windows installation per website account and per license key. This applies to browser sign-in, linked Discord sign-in, and key sign-in. Website access remains available so you can manage your account and reset a binding.
What identifies a device
The desktop app reads Windows MachineGuid from the 64-bit registry view and hashes it with SHA-256 and an ExtraExecutor-specific prefix. The raw identifier is never sent to the server. The server stores the hash, the account/key association, and binding timestamps. Your dashboard shows a shortened hash.
This is a Windows-installation fingerprint, not a kernel driver, a serial-number changer, or an unforgeable hardware attestation. Reinstalling Windows, cloning a Windows image, or an administrator changing this identifier can affect the binding. The feature does not modify Roblox identities, game-account identifiers, disks, or firmware.
First sign-in
- Install ExtraExecutor 2.11.6 or newer.
- Continue in your browser, sign in through linked Discord, or enter a valid key.
- The server atomically reserves the first device for that account or key.
- Later desktop sign-ins must report the same fingerprint. Copying the application folder alone does not reset the binding.
A redeemed key also uses the binding of its associated website account. Keys without a website owner still have their own device binding. They need to be associated with an account or handled by an administrator before a website account can manage their reset.
Moving to another device
Open your website dashboard and use Devices → Reset device. A user can reset once every seven days. Resetting removes the account binding and bindings of keys redeemed by that account, revokes its desktop sessions, and allows the next desktop sign-in to establish the new device. An authenticated website administrator can reset a user's binding without the user cooldown.
The Windows app caches a successful authorization for at most five minutes; a server reset or revocation is enforced when it next revalidates. Roblox vault data and scripts are not erased by a device reset.
Troubleshooting
| Message | Action |
|---|
| Update to ExtraExecutor 2.11.6 | Download the current release. Old clients do not send a hardware fingerprint. |
| Linked to another Windows device | Reset through the website or ask your administrator. |
| Reset available later | Wait until the returned reset time. The cooldown is enforced on the server. |
| Windows device identification unavailable | Check Windows installation health and contact support. The app fails closed instead of generating a new random hardware identity. |
| Session expired after reset | Sign in again on the intended Windows device. |
Discord OAuth still requires the application's OAuth Client Secret to be configured. Device binding does not configure Discord for you.