Built for Roblox script sellers

Roblox Luau Obfuscator & Script Whitelist

Keep your Lua source out of stealer hands, lock every key to one device, and watch every execution from one dashboard. Sign in with Discord and you are already set up.

Free forever planNo credit card requiredDiscord sign-in
0scripts protected
0developers
0keys issued

Protect your script and get paid for it

VM obfuscation, a key system that earns for you, device locking and live error reports, all in one dashboard.

ObfuscatorVM obfuscator
KeysKeys & HWID lock
Version historyVersion history
Script settingsScript settings
DiscordDiscord sign-in
DocsDocs & API

VM obfuscation

Your Luau is rebuilt as a generated virtual machine plus data, line info stripped, before a single byte is served.

Keys & HWID lock

Keys are HMAC-verified server side and bound to one device. HWID changes wait out a 24 hour cooldown.

Redeem keys & plans

Sell access with PLOTMOR- keys. Free holds 3 scripts, Premium 10, Ultra unlimited and stackable.

Version history

Every save records a version. Open any of the last 10 and read the exact source that shipped.

Script settings

Set an expiry or an execution cap per script; the key check enforces both on every run.

Error reports

Runtime errors post straight back to your dashboard, last 20 per script, rate limited per IP.

Discord sign-in

Your dashboard account is your Discord identity. One click, no passwords, no email verification loop.

MCP bridge

The plotmor-mcp server lets your AI tools list scripts, push source and pull obfuscated builds.

EZUI library

Tabs, sliders, toggles and notifications with a PlotMor yellow theme, attachable to any script.

Launcher

A Windows multi-account Roblox launcher carrying the PlotMor brand, for your players to use.

Docs & API

Every endpoint your scripts touch is documented: loader, key checks, error reporting, MCP.

Public profiles

A public page at /u/yourname with your avatar, member date and script count.

Live in three steps

1. Create a script

Sign in with Discord, paste your Lua or Luau source, name it.

2. Protect it

Pick a protection level and obfuscate. Your build is stored server side only.

3. Share the loader

Hand players one loadstring line. The loader checks the key and streams the protected build into memory.

Frequently asked questions

How does PlotMor stop script dumping and decompilation?

Your script is rebuilt as a VM-plus-data build before it is ever served, and players only ever receive the protected build. That is a strong barrier, not an impossible one, which is why keys, device locks and execution caps sit on top of it.

Can I lock a key to one device?

Yes. Keys are verified server side and bound to the HWID that first redeemed them. A different device fails the check, and a legitimate HWID change waits out a 24 hour cooldown.

Which executors are supported?

PlotMor works with the major modern Roblox executors. Executors differ in what they support, so test your protected build on the ones your players actually use before you publish.

Is PlotMor a Luarmor alternative?

It is an obfuscator, key system and script whitelist in one dashboard, with a free plan and Discord sign-in. If you are comparing platforms, the fastest test is to protect one real script here and run it.

How does the key system work?

When a player runs your loader, it calls the key check endpoint with the key and HWID. The server validates the key, its expiry and any execution cap, and answers valid or the reason it refused. The loader kicks with that reason.

Can I use PlotMor for free?

Yes. The free plan includes the obfuscator, key system and script manager. Paid plans raise the script limits and add features. No card needed to sign up.

How do I add PlotMor to my script?

Create a script in the dashboard, paste your source, and copy the loader line. Players run that one line; everything else happens server side.

Is my source safe on your servers?

Your source lives server side and is never served raw. Players receive only the protected build, and sign-in is through Discord OAuth with HMAC-signed sessions, or email with PBKDF2-hashed passwords as a fallback.

Ready in minutes