License activation screen in the desktop agent

​
Installing the agent

1

Download the installer

Get the installer for your platform from the dashboard under Desktop Agent → Downloads:
  • macOS — .dmg (Apple Silicon and Intel)
  • Windows — .exe installer (Windows 10/11)
2

Install and launch

Run the installer and launch TruePrivacy Agent. On first launch you’ll be asked to activate a license or enroll.

​
Troubleshooting blocked installs

Because installers are distributed directly (not through an app store), macOS and Windows may warn before the first launch. This is expected — approve the app once and the warning does not return.
1

Try opening via right-click

In Finder, go to the Applications folder, right-click (or Control-click) on TruePrivacy Agent and choose Open, then click Open in the dialog. This bypasses the warning for this app only.
2

Allow it from Privacy & Security

If the app is still blocked, open System Settings → Privacy & Security, scroll to the Security section — you’ll see “TruePrivacy Agent was blocked from use because it is not from an identified developer” — and click Open Anyway, then confirm with your password or Touch ID.
3

If macOS says the app "is damaged"

Remove the quarantine flag from Terminal, then launch the app again:
xattr -d com.apple.quarantine "/Applications/TruePrivacy Agent.app"
1

Run anyway from the SmartScreen dialog

On the blue Windows protected your PC screen, click More info, then click Run anyway.
2

Unblock the installer file

If Run anyway doesn’t appear, right-click the downloaded .exe → Properties → check Unblock at the bottom of the General tab → OK, then run the installer again.
3

Check with your IT team

If your organization uses AppLocker or an endpoint protection product that quarantines the installer, ask IT to allow-list TruePrivacy Agent or deploy it via your device management tooling.
These warnings appear only on the first launch. Once approved, the agent opens normally, and auto-updates do not re-trigger them.

​
Enrollment (optional)

If your endpoints can reach the TruePrivacy backend, enroll the agent with your organization from Settings. Enrollment associates the device with your org for license and device management. It does not change the local-only processing model — file contents and findings stay on the device.
Enrollment is entirely optional. Air-gapped or restricted-network machines use offline license activation instead.

​
Offline license activation

Offline licenses let the agent run with no network connectivity at all.
1

Obtain your license key

Your administrator generates a key in the dashboard. Offline keys are prefixed TP-OFFLINE-:
TP-OFFLINE-eyJvcmciOiJsb3dlcnBsYW5lIiwicGxhbiI6ImVudGVycHJpc2Ui...
2

Enter the key in the agent

Paste the key into the activation screen. The agent verifies it locally — no server call is made.
3

Verify activation

The license panel shows organization, plan, expiry date, and device allowance.

​
How offline licenses work

  • Each key is cryptographically signed by TruePrivacy. The agent verifies the signature locally, so keys cannot be forged or altered.
  • The signed payload encodes the organization, plan, expiry date, and maximum device count.

​
Expiry enforcement

License expiry is enforced live, not just at startup:
When a license expires, any running scan stops immediately and the UI locks until a valid license is entered. Plan renewals ahead of expiry to avoid interrupting in-progress discovery work.
EventBehavior
License validFull functionality
License expires while idleUI locks; activation screen shown
License expires mid-scanScan halts; partial results retained locally; UI locks
New valid key enteredFunctionality restored