How to Check if Your Windows and Office Are Genuine (2026 Guide)

Written by the Softkeyworld technical team · Updated October 2026

"Activated" and "genuine" are not quite the same thing. A copy of Windows or Office can show as activated while relying on an unofficial activator that renews itself in the background, and those tools are a common way for malware to reach a PC. Equally, a properly licensed copy can temporarily show as unactivated after a hardware change. This guide shows you how to check both Windows 11 and Office properly, using only built-in tools, and how to read the results like a technician would. It also covers what to do if something does not add up.

Why it matters whether your software is genuine

• Security: unofficial activators need administrator rights, create scheduled tasks and often ask you to switch off antivirus. That is exactly the access malware wants.
• Reliability: KMS-based hacks expire if the renewal task breaks, so the "Activate Windows" watermark or Office's "Unlicensed Product" banner can appear without warning.
• Compliance: businesses can be asked to prove their licences. An activated install without a matching purchase is not a licence.
• Support: Microsoft and reputable sellers can only help with licences they can trace.

Step 1: Check Windows activation in Settings

1. Press Win + I to open Settings.
2. Go to System > Activation.
3. Check the Activation state line and expand it to read the detail message.

Message you see	What it means on a home or small-business PC
Activated with a digital licence (linked to your Microsoft account)	Normal for retail, OEM and upgraded PCs. The best outcome.
Activated with a product key	Normal. Sign in with a Microsoft account to link it for easier reactivation.
Activated using your organisation's activation service	KMS. Expected on a work-managed PC; suspicious on a personal one.
Not active, with an error such as 0xC004F213 or 0x803F7001	No valid licence was found for this hardware, often after a motherboard change or clean install of a different edition.

The Settings page is a good first look, but it does not tell you how long activation will last or exactly which channel it came from. For that, use the command line.

Step 2: Verify Windows with slmgr /xpr and /dli

The Software Licensing Management Tool (slmgr.vbs) is built into every version of Windows. Press Win + R, type cmd, press Enter, then run:

• slmgr /xpr — shows the expiry status. A genuine retail or OEM licence reports "The machine is permanently activated." A date roughly 180 days ahead means KMS activation.
• slmgr /dli — shows the edition, the channel (RETAIL, OEM_DM, VOLUME_MAK, VOLUME_KMSCLIENT), the last five characters of the key and the licence status.
• slmgr /dlv — the verbose version, which on a KMS client also lists the KMS machine name it activated against.

If you are not sure what the channel names mean, our guide to authentic Microsoft software explains how we source keys and what a legitimate activation should look like. As a quick rule: on a personal PC you should see RETAIL or OEM and "permanently activated".

Check for a firmware key

Branded laptops and desktops usually have a Windows key embedded in the firmware. In PowerShell, run (Get-CimInstance SoftwareLicensingService).OA3xOriginalProductKey. If a key is returned, the PC shipped with a genuine OEM licence for the edition printed on the box (often Home), which Windows can use to reactivate after a clean install of that edition.

Step 3: Check Office in File > Account

1. Open Word, Excel or any Office app and create a blank document.
2. Click File > Account (in Outlook, File > Office Account).
3. Under Product Information, look for "Product Activated" followed by the product name, for example "Microsoft Office Home and Business 2024" or "Microsoft 365".

Retail and Microsoft 365 installs normally show "Belongs to:" with your Microsoft account email, because the licence is linked to that account. You can confirm the same purchase under Services & subscriptions at account.microsoft.com. "Product Activated" alone does not tell you how the activation happened, so for perpetual versions go one step further.

Step 4: Verify Office with ospp.vbs /dstatus

1. Right-click Start and choose Terminal (Admin).
2. Change to the Office folder: cd "C:\Program Files\Microsoft Office\root\Office16" (use Program Files (x86) for 32-bit Office).
3. Run cscript ospp.vbs /dstatus.

The output lists each Office licence with its LICENSE NAME, LICENSE STATUS, the last five characters of the key and, for KMS activations, a KMS machine name. A healthy result shows "---LICENSED---". Microsoft documents this tool in its Office volume activation guidance. Office 2016 and later all use the Office16 folder. Microsoft 365 subscriptions are licensed differently and are best checked in File > Account and your Microsoft account.

Step 5: Confirm the edition matches your licence

A surprisingly common problem is not a fake licence but a mismatch. Open Settings > System > About and compare the Edition line with what you bought. If you paid for Windows 11 Pro but About says Home, your Pro key was never applied; enter it under Settings > System > Activation > Change product key and Windows will upgrade in place. If About says Enterprise or Education on a home PC that was never managed by an organisation, that is worth investigating, because those editions are not sold to consumers and are a favourite target for activators.

For Office, compare the product name in File > Account with your purchase. Office Home & Business and Microsoft 365 are consumer editions; Office LTSC Professional Plus is a volume edition intended for organisations.

Checking several PCs in a small business

If you look after a handful of office PCs, keep a simple spreadsheet: computer name, Windows edition, the channel from slmgr /dli, the last five characters of the key, the Office version and where each licence was bought. Saving the purchase emails alongside it means you can answer an audit or a support query in minutes. Do this when you first set up each PC and whenever a machine is rebuilt; it is far harder to reconstruct later.

Signs of a counterfeit or KMS-hacked install

Warning sign	Where to see it	Why it is suspicious
VOLUME_KMSCLIENT channel on a personal PC	slmgr /dli	KMS needs a corporate server; homes do not have one
Expiry date around 180 days away	slmgr /xpr	Retail and OEM licences never expire
KMS machine name is 127.0.0.1, a random IP or an internet hostname	slmgr /dlv, ospp.vbs /dstatus	Points to a local emulator or public piracy server
Tasks named AutoKMS, KMSAuto, AutoPico or similar	Task Scheduler Library	Renews the fake activation in the background
Defender alerts such as "HackTool:Win32/AutoKMS"	Windows Security > Protection history	Microsoft classifies activators as hacktools
Folder exclusions added to Windows Security you did not create	Virus & threat protection settings > Exclusions	Activators hide themselves from scans this way

Physical and purchase signs matter too. A used PC sold with "lifetime Windows and Office included" but no licence documentation, a seller who sends a pre-activated disk image, or a key that comes with instructions to disable antivirus all deserve suspicion. Microsoft's How to Tell site has further guidance and a form to report counterfeit software.

What to do if your copy is not genuine

The safest route: a clean install

Because activators run with full system rights, you cannot be certain what else they changed. If the PC holds banking, business or personal data, back up your files (not programs), then perform a clean install from Microsoft's official media and activate with a legitimate key. Our guide on how to download, install and activate Windows 11 Pro covers every step.

The repair route

1. Run a full scan, then a Microsoft Defender Offline scan from Windows Security > Virus & threat protection > Scan options.
2. Delete the activator's scheduled tasks and any Windows Security exclusions you did not add.
3. In an elevated terminal, clear the old Windows licence: slmgr /upk, slmgr /cpky and slmgr /ckms.
4. Enter your genuine key under Settings > System > Activation > Change product key.
5. For Office, remove the old key with cscript ospp.vbs /unpkey:XXXXX (the last five characters from /dstatus) and clear the KMS host with cscript ospp.vbs /remhst. Volume-edition Office cannot take a retail key, so you will usually need to uninstall it and install the edition your key is for.

If you have just hit the watermark rather than a hacked install, see our guide to removing the "Activate Windows" watermark the legitimate way. For Office, our Office 2024 installation and activation guide walks through a clean setup.

If you paid for it

Contact the seller first with screenshots of your slmgr or ospp.vbs output and ask for a replacement or refund. If you paid by card or PayPal and the seller does not respond, your payment provider's dispute process may help. Keep the original order confirmation and the key itself, and avoid deleting anything from the PC until you have captured the evidence, because the activation details disappear once you clear the licence.

When choosing a replacement, buy from a seller that names the licence type on each product, delivers a key rather than a pre-activated image, and points you to Microsoft's own installation files. Those three habits rule out most of the problems described in this guide.

Frequently asked questions

How do I know if my Windows 11 is genuine?

Settings > System > Activation should show Active, slmgr /xpr should say "permanently activated", and slmgr /dli should show a RETAIL or OEM channel on a personal PC.

Is KMS activation always illegal?

No. KMS is Microsoft's legitimate system for organisations with volume licences. It is the unofficial third-party KMS activators and public KMS servers used on personal PCs that are unauthorised.

Does Microsoft disable pirated Windows?

Windows does not usually lock you out, but an unlicensed or failed activation shows a watermark, restricts personalisation and can revert at any time. The bigger risk is the security of the activator itself.

How do I check if Office is activated?

Open any Office app and go to File > Account. "Product Activated" confirms activation; run cscript ospp.vbs /dstatus to see the licence type and any KMS server.

Can a genuine key show as not activated?

Yes, after a motherboard change, when the key is for a different edition from the one installed, or before the PC has been online. Run the Activation troubleshooter in Settings > System > Activation, or contact your seller.

Will a second-hand PC's Windows licence still be valid?

An OEM licence that came with the PC stays with that PC. Check it with the commands above; if it shows KMS or an expiry date, budget for a proper licence.

Our recommendation

Spend five minutes running the checks in this guide, especially on any second-hand PC or after a third party has installed your software. If anything points to KMS on a personal machine, replace it with a legitimate licence rather than living with the risk. A genuine Windows 11 Pro licence key activates directly with Microsoft and shows "permanently activated", and if your result looks unusual our team can help you read it through our contact page.

Get genuine Windows 11 Pro

Related reading

Resource	Why read it
Authentic software	How we source licences and what genuine activation looks like
Remove the "Activate Windows" watermark	Legitimate fixes when activation lapses
Install and activate Windows 11 Pro	Clean install from official Microsoft media
Office 2024 install and activation	Set up Office cleanly after removing a hacked copy