Independent publication · not affiliated with any maker named here · no assistance offered
Antivirus Referenceantivirusreference.com

Maker reference

F-Secure activation: the subscription code, the account and the 365-day rule

F-Secure, the Finnish security company, records its consumer subscriptions in an online account and issues codes only for retail boxes and some campaigns. This page describes the code’s two formats, when a code can be added, how licences are counted and released, and how renewal works.

  • Independent reference
  • Facts checked 3 October 2026
  • No sales · no assistance
The activation chain, illustratedA retail box card carrying a subscription code in four groups of five, an arrow to an account window at my.f-secure.com, and two devices that sign in to that account. RETAIL BOX SUBSCRIPTION CODE XXXXX-XXXXX-XXXXX-XXXXX one code at a time ACCOUNT my.f-secure.com licences 3/5 DEVICES SIGN IN
  • 4 × 5letters in a current code: four groups of five
  • 365 daysor fewer must remain before a code can be added
  • 0codes issued for purchases in the maker’s online store
  • 25devices on the largest Total plan
Company
F-Secure Corporation, Helsinki, Finland; listed on Nasdaq Helsinki; its corporate-security business was separated as WithSecure in 2022
Consumer plan names
Total, Internet Security (formerly SAFE), VPN (formerly FREEDOME), ID Protection and Scam Protection
What the key is called
Subscription code, also called voucher, renewal or box code; the legacy programs said subscription key
Where the key is supplied
In retail boxes, on shop receipts and in some campaigns only; store purchases carry none
Where it is redeemed
My F-Secure at my.f-secure.com, in the Subscription section
Where the record lives
The same account: validity date, licences remaining and billing details

Two code formats

Group 1 of 4 — current codes for Total and Internet Security: five lettersXXXXXGroup 1 of 4 — current codes for Total and Internet Security: five letters-Group 2 of 4 — legacy Internet Security codes used five groups of fourXXXXXGroup 2 of 4 — legacy Internet Security codes used five groups of four-Group 3 of 4 — codes come only with retail boxes and some campaignsXXXXXGroup 3 of 4 — codes come only with retail boxes and some campaigns-Group 4 of 4 — a code turns into time and licences in the accountXXXXXGroup 4 of 4 — a code turns into time and licences in the accountSUBSCRIPTION CODE · 4 groups × 5 letters · point at a group

The knowledge base describes two shapes. Current codes for Total and for Internet Security, the product formerly called SAFE, are four groups of five letters. Codes for the older Internet Security program were five groups of four characters. The maker names the object several ways, as a subscription code, voucher code, renewal code or box code, and its legacy programs called it a subscription key.

No code for store purchases

A store purchase recorded in the account without a code, generic illustrationA shopping bag, a crossed-out code strip, and an account window at my.f-secure.com that already shows the subscription. F-SECURE STORE CODE NOT ISSUED my.f-secure.com Subscription in My F-Secure store purchases carry no code: devices are activated by signing in
Generic illustration: a purchase in the maker’s store is recorded in the account without a code.

The maker states that it “does not use subscription or activation codes when you have purchased the subscription via the F-Secure online store.” A store purchase is recorded directly in the account, and devices are activated by signing in. Codes exist for retail boxes, for some campaigns and on shop receipts; the maker adds that when a product does use a code, the order confirmation email includes it.

Redeeming a code in the account

A code is redeemed in My F-Secure, at my.f-secure.com. The account’s Subscription section offers to enter a subscription code, and devices are then added to the account. The installation page sets out the same order: account, code, installation, device. It also notes that devices already on the account need no reinstallation when a code is added.

When a code can be added

When a subscription code can be added, generic illustrationA subscription bar whose final 365 days are marked as the period in which a code is accepted, with three rules beneath it and a licence counter reading three of five remaining. CURRENT SUBSCRIPTION CODE REFUSED LAST 365 DAYS · CODE ACCEPTED END DATE ONE CODE AT A TIME AUTO-RENEWAL OFF FIRST MAIN USER ONLY LICENSES REMAINING 3/5
Generic illustration: a code is accepted only in the last 365 days of a subscription, with automatic renewal off, from the account’s main user.

The maker limits codes in three ways. An account holds one code at a time, so a second code cannot be stacked on the first. A code can be added only when 365 days or fewer remain on the current subscription; earlier than that, the account replies that renewal with a code is possible only from a stated date. And a code cannot be entered while automatic renewal is on, or by a sub-user. When a code is accepted, its time is added to the days remaining, though trial days are not compensated. A code for the same number of licences adds time only, while a code for more licences also raises the licence count.

Licences remaining

The account shows a subscription’s validity date at the top of the page and, under Subscription, a line reading “Licenses remaining X/Y”. The rule is one licence per device. Moving protection to a new computer means releasing the licence held by the old one; the maker says only then can the licence be used on another device. Subscriptions sold through a reseller or an internet provider show that seller’s logo and no expiry date, because the seller manages them.

Renewal

The renewal flow runs through a shopping cart operated by Cleverbridge, and the remaining days of the current subscription are added to the new period. Automatic renewal is cancelled in the account, after which the subscription stays valid until it expires; renewals arranged by third parties such as internet providers are cancelled through those providers. The 30-day money-back guarantee is claimed with the order’s reference number. For Total, the site states that a new subscription and a renewal cost the same.

The trial

Total can be tried for 30 days. The product page, as read on 3 October 2026, says the trial renews automatically into a one-year subscription, with notice before the first payment; an older knowledge-base article says no charge follows because no payment details are taken. The terms on the page at the moment a trial starts are the ones that apply.

Phones and tablets

The mobile app, F-Secure: Total Security & VPN, signs in to the account or is installed from the account’s Add device option. A subscription bought in the App Store applies only to iOS devices signed in with the same Apple ID.

What the maker says about its own calls

The maker’s page on phone scams describes its own behaviour plainly. It says it calls only people who have already contacted it and opened a case, and that remote sessions are carried out only when the customer contacted F-Secure beforehand and has a valid case open. It adds two rules for readers:

  • No call from the maker unless the subscriber made contact first
  • No remote session without a case the subscriber opened beforehand
  • No access to a device for people its owner does not know
  • No credentials or card details handed to anyone who asks

The maker’s advice for anyone targeted is to report the call to the authority that deals with fraud where they live.

My F-Secure and an imitation

Both wireframes stack the address bar above the page, because the bar decides who is answering. The imitation is set on a reserved example domain and stands for a pattern only.

The maker’s own page, as an annotated wireframeAn address on the f-secure.com domain inside the signed-in account, with one field for the code and the licence count. https://my.f-secure.com/ what the page asks for, in the illustrator’s words: the code field the licences remaining one plain control; nothing else on the page WIREFRAME · GENUINE
The maker’s page. Registrable domain f-secure.com, in the signed-in account. One code field and the licence count; the maker calls nobody who has not contacted it first.
An imitation, as an annotated wireframeThe brand word appears in a subdomain of an unrelated domain; the page shows a countdown, a charge demanded and a number to ring. https://fsecure-activate.example.net/code three things drawn on the imitation, labelled by the illustrator: tell 1 · a countdown clock tell 2 · a charge demanded tell 3 · a number to ring WIREFRAME · IMITATION
Imitation. Registrable domain example.net; “fsecure-activate” is a label its owner made up. An unexpected call or a remote-access request in the maker’s name contradicts its own policy.

Six terms from My F-Secure

Six expressions from the account and the retail box, with a line on each.

My F-Secure

The account at my.f-secure.com in which subscriptions, codes, devices and billing are kept.

Licenses remaining X/Y

The licence count: X still free out of Y bought, one per device.

Release license

Freeing the licence held by a device so that another device can use it.

Sub-user

A person invited to a subscription, given an account of their own but unable to renew with a code.

Voucher, box or renewal code

Other names the maker uses for the subscription code from a retail box or a campaign.

Reference number

The order reference used to claim the 30-day money-back guarantee on a store purchase.

Read next

Documentation consulted

Scroll to Top