Microsoft axes popular free Windows 11/10 KMS activation hack that worked without internet
(Note: Please excuse jeeted source. Thank you saar!!!)Sayan Sen @ssc_combater007 · Nov 13, 2025 10:52 EST · Hot!
This week Microsoft made a couple of big Windows announcements. First, the company confirmed that Windows 11 is becoming an agentic OS leading to a massive backlash. The company also ended support for Windows 11 version 23H2 and added that all systems will soon be getting the latest 25H2 feature update with just one condition, that they must be supported.
The tech giant also made another fairly major change that was not documented by the company in its official release notes. That is because the company has removed a popular offline Windows 11 and 10 hack that was used to illegally activate systems. The method was dubbed KMS38 and was provided by MASSGRAVE.
If you are not familiar, MASSGRAVE (where MAS stands for Microsoft Activation Scripts) is a project that offers various unofficial Windows and Office activation services.
KMS38 was an offline activation method that worked by tricking the GatherOSstate EXE file so as to extend the KMS (Key Management Service) activation period up to January 19, 2038, 03:14:07 UTC, instead of the usual 180 days. If you are wondering, the Y2K38 super-bug prevented going further. GatherOSstate essentially helped determine if an OS in its current state is eligible for an upgrade.
The MASSGRAVE author has confirmed that this no longer works with the latest November 2025 Patch Tuesday update (KB5068861, KB5067112).
This was probably already on the cards as MASSGRAVE adds that in Windows build 26040 (released back in January 2024) gatherosstate.exe was removed from installation media. This meant in-place upgrades and feature updates reset the grace period to zero, requiring reconnection to a KMS server. And with last month's Windows 11 optional update (KB5067036), Microsoft has fully deprecated the GatherOSstate functionality, making KMS38 unusable.
Thus with the latest MAS script, version 3.8, KMS38 has now been dropped entirely. MASSGRAVE says that users should switch to HWID (Hardware ID) or TSforge activation methods, both of which still work.
Please note that while we are reporting on this news as it is significant, Neowin does not recommend or promote using such unofficial and pirated ways of activation.
(Article - Jeet source) (Archive)
_____________________________________________________________________________________
Microsoft takes out the trash: Why the permanent blocking of a popular Windows 11 activation hack is a major win for system integrity and security
NewsBy Sean Endicott published 15 hours ago
Massgrave’s MAS might need a mass grave after Microsoft managed to block Massgrave’s masquerade.
One method of activating Windows 11 without a license has been blocked by Microsoft. (Image credit: Windows Central / Zac Bowden)
With Windows 10 reaching the end of mainstream support last month, many are taking a hard look at Windows 11. But those looking to activate the operating system without a license have one less option to do so. Microsoft has blocked a tool that allows people to activate Windows illegally.
The tool in question comes from a group called "Massgrave." The “MAS” in the name stands for Microsoft Activation Scripts. That group published a set of tools online that allow you to activate Windows and Office without a license. The PowerShell scripts are available on GitHub and let users run Windows or Office without paying any fees.
Ed Bott discussed the tools earlier this year for ZDNet and performed extensive testing. Back in February, he was able to use Massgrave's scripts to activate a PC and grant that system three years of Extended Security Updates.
Bott had similar success activating Office with the tools shared by Massgrave. It's difficult to determine how safe the tools are, even if they are effective. Even if the scripts shared by Massgrave are entirely safe, bad actors could distribute modified, malicious versions.
Earlier this year, we saw a malware-filled copy of a tool used to bypass Windows 11's minimum requirements. That's just one example of bad actors copying a tool and infusing it with malware.
If this all sounds too good to be true, that’s because it is — at least for those who care about legality. Massgrave is open about the fact that its tools are for piracy.
When functional and unblocked, the scripts could be used to save hundreds of dollars on a single system. While detection by Microsoft isn’t guaranteed — or even likely in many cases — there’s still a risk of being caught using the tools. Businesses in particular could run into issues if their IT teams used Massgrave to activate PCs and use unlicensed software.
The author of Massgrave confirmed that Microsoft has blocked the method of activation, as reported by Neowin. Known as KMS38, the method reportedly stopped working following the November 2025 Patch Tuesday updates.
Of course, when it comes to bypassing blocks, it's a game of cat and mouse. Massgrave could potentially find another workaround, and then Microsoft would have to respond in kind.
Plugging holes
Microsoft recently blocked a method of activating Windows 11 without having a license. (Image credit: Ben Wilson | Windows Central)
Usually, I'm one to speak out against Microsoft blocking workarounds. I'm frustrated by the dwindling options to set up a Windows 11 PC without the internet or a Microsoft account. Microsoft blocked a popular bypass of those requirements earlier this year, much to my chagrin.
But the situation is different for MAS, which is used to activate Windows illegally. It's reasonable for Microsoft to take steps to stop MAS from being able to activate Windows without a license.
Some may not be so eager to use Windows 11 if it requires a full license. While people have joked about every year in recent history being "the year of Linux," we may actually see an exodus of Windows users to other platforms following the death of Windows 10.
Because of the minimum requirements of Windows 11, many PCs cannot be upgraded to the new operating system. Linux and Google's ChromeOS are more viable options than ever due to advancements on both platforms. Some have even gone so far as to make WINUX, a free Linux distro designed for Windows users.
FAQ
What exactly was the activation hack that Microsoft blocked?
The blocked method was a popular loophole that allowed users to bypass Microsoft's license verification and security checks to activate an unauthorized copy of Windows 11, often used for piracy.Why is blocking this hack considered a "good thing"?
Blocking the hack is a good thing because it enhances the overall security and integrity of the Windows ecosystem. Pirated copies of Windows often lack crucial security updates or may be bundled with malware, posing a threat to users and the network they are connected to.Will this block affect my legitimately purchased copy of Windows 11?
No. If you have a legitimate, activated copy of Windows 11, this security update will have no negative effect. It is only designed to prevent unauthorized activation.What happens to a PC that used this hack to activate Windows 11?
Any PC that relied on this specific unauthorized method for activation will likely revert to an unactivated state, displaying the "Activate Windows" watermark and restricting personalization features. Users will need to purchase a legitimate license key.(Article) (Archive)
_____________________________________________________________________________________
KF Windows OS Thread
Post by KMS38 author, MassGrave:
https://x.com/massgravel/status/1988399517319000416
https://archive.ph/Q3c7O
