: Always verify license keys server-side, even if you implement client-side checks for user experience. Client-side validation can be bypassed trivially.