Independent publication · not affiliated with any maker named here · no assistance offered
Antivirus Referenceantivirusreference.com

Maker reference

Norton activation: the hyphenated key, validation at the till and the account

Norton’s consumer products are sold under the 360 and AntiVirus Plus names by Gen Digital. This page describes the 25-character product key, why a retail key is checked at the point of sale, where it is entered, and what the account holds afterwards.

  • Independent reference
  • Facts checked 27 September 2026
  • No sales · no assistance
The activation chain, illustratedA card from a retail box carrying a 25-character product key in five hyphenated groups, an arrow to an account window at my.norton.com, and two devices that sign in to that account. RETAIL BOX · CARD PRODUCT KEY XXXXX-XXXXX-XXXXX-XXXXX-XXXXX used once ACCOUNT my.norton.com 1 year · 5 devices DEVICES SIGN IN
  • 25letters and digits, in five hyphenated groups of five
  • 1×the key is used once, at first setup or renewal, then kept in the account
  • 0days carried over when a new key starts its own term
  • 3routes on a phone: sign in, type the key, or a provider’s PIN
Company
Gen Digital Inc.; the company was named NortonLifeLock until November 2022, and Norton and LifeLock remain its brands
Consumer plan names
AntiVirus Plus; 360 Standard, Deluxe and for Gamers; 360 with LifeLock Select Plus, Advantage and Ultimate Plus; Mobile Security
What the key is called
“Product key” throughout the documentation; a “PIN” when issued by a service provider
Where the key is supplied
On a card or sticker inside a retail box; in the order confirmation email; on an activation card from a computer-service shop; in the account after activation
Where it is redeemed
norton.com/setup, or inside the installed program, against an account
Where the record lives
The account at my.norton.com, under My Subscriptions

What the key looks like

Group 1 of 5 — five letters or digitsXXXXXGroup 1 of 5 — five letters or digits-Group 2 of 5 — the hyphens are separators; the maker says the key has no special charactersXXXXXGroup 2 of 5 — the hyphens are separators; the maker says the key has no special characters-Group 3 of 5 — 25 characters in all, letters and digits onlyXXXXXGroup 3 of 5 — 25 characters in all, letters and digits only-Group 4 of 5 — a retail key is unlocked only once the shop has reported the saleXXXXXGroup 4 of 5 — a retail key is unlocked only once the shop has reported the sale-Group 5 of 5 — used once; afterwards the key is kept in the account beside the subscriptionXXXXXGroup 5 of 5 — used once; afterwards the key is kept in the account beside the subscriptionPRODUCT KEY · 5 groups × 5 characters · point at a group

Five hyphenated groups of five, 25 letters and digits in all. The maker states that the key contains no special characters; the hyphens are separators, not part of the key. The shape is the quickest way to tell this card from its shelf neighbours, since several makers’ cards are sold side by side. The key is never 20 or 10 characters, and it is never entered into another maker’s page.

Validated at the till

A retail key validated at the till, generic illustration A boxed card passes a shop scanner; the sale is reported to the maker and only then does the key unlock. An unscanned box carries a key that reads correctly and still fails. RETAIL BOX XXXXX-XXXXX-XXXXX-XXXXX-XXXXX SALE REPORTED key unlocked for one redemption unscanned: reads correctly, still fails till
Generic illustration: the shop’s scan reports the sale, and the report is what unlocks the key.

The maker calls its retail keys “theft protected”. The shop reports each sale to the maker, and only a reported sale unlocks the key. A box that left the shelf unscanned carries a key that reads correctly and still fails, and the article on the error points the purchaser back to the shop that sold it.

Where redemption happens

A retail purchase requires an account. The documentation describes two doors to the same room. On the web, norton.com/setup takes the key first and an email address second; the purchaser signs in with a password or a code sent to that address, or creates an account, and the subscription is recorded. Inside an installed program, the same choice appears: attach the program to a subscription the account already holds, enter a new key, or buy one.

The retail article adds a detail that surprises some purchasers: the flow may ask for payment details in order to enrol the subscription in automatic renewal. That request comes from norton.com, inside the purchaser’s own session, and is part of the documented mechanism. Card details demanded down a telephone line, or on a page reached through an emailed invoice, are another matter, described below.

What the account holds

Under My Subscriptions the account shows every subscription’s end date, the product key beside it, the devices using it and the renewal setting. Two documented rules follow from the account being the record:

  1. The key is used once, at first setup or at renewal; the maker then keeps it in the account beside the subscription, so a reinstallation or an extra device draws on the account rather than the card.
  2. A fresh key starts its own term: whatever time was left on the previous subscription is not carried across to the subscription the new key creates. A renewal key is therefore best used near the end of a term, not at its start.

Phones and service-provider editions

On Android and iOS the 360 app accepts three routes: redeeming a subscription the account already holds by signing in, typing the 25-character key, or a PIN from a telecom or broadband company that bundles the product with its plans. Provider-issued editions are managed partly through the provider’s own portal, which is the one place a Norton subscription can legitimately be administered outside norton.com.

What the maker says it never sends

The maker’s own pages describe the impersonations that use its name and, in doing so, describe what its genuine communication looks like:

  • No request for a password, a Social Security number or card details by email
  • No message sent from a free webmail address
  • No unprompted attempt to take remote control of a device
  • No calendar invitation related to billing or payment

The calendar invitation is a newer pattern, in which a fake renewal appears as a calendar event. It also documents fake order confirmations pushed through shopping apps, and the classic renewal notice with an attached invoice and a telephone number to call.

The maker asks that suspicious messages be forwarded, as attachments, to an address on its domain named on the page linked below. The check that resolves any of these messages is the account: the subscription list at my.norton.com shows the true renewal date and amount, and a charge that is not in the account and not on the card statement did not happen.

Two address bars, one brand word

The wireframes put the address bar above the page because that is the order in which the two should be read. The look-alike is drawn on a reserved example domain: it stands for a pattern, not for any site in particular.

The maker's own page, as an annotated wireframeAn address on the norton.com domain; the key is taken first and an email address second, nothing else. https://www.norton.com/setup what the page asks for, in the illustrator's words: the key field the email field one plain control; nothing else on the page WIREFRAME · GENUINE
The maker’s page. Registrable domain norton.com; the key first, an email address second. If payment details are requested here, it is the documented renewal enrolment, inside the same session.
An imitation, as an annotated wireframeThe brand word appears in a subdomain of an unrelated domain; the page shows a countdown, a charge demanded and a number to ring. https://norton-setup.example.net/key three things drawn on the imitation, labelled by the illustrator: tell 1 · a countdown clock tell 2 · a charge demanded tell 3 · a number to ring WIREFRAME · IMITATION
Not the maker’s page. The registrable domain is example.net, and “norton-setup” is a label its owner typed in. Countdown clock, a charge, a telephone line: the genuine page has none of the three.

Names that appear on the box

Norton consumer plan names, 27 September 2026
NameDevicesNote
Norton AntiVirus Plus1Single-device edition
Norton 360 Standard3Adds VPN and cloud backup to the antivirus core
Norton 360 Deluxe5The edition most often sold on retail cards
Norton 360 with LifeLock Select Plus10Adds LifeLock identity features; United States
Norton 360 with LifeLock Advantage, Ultimate Plus—Higher identity tiers; United States
Norton 360 for Gamers, Norton Mobile Security—Variant and phone editions

The edition on the card determines the device allowance and the bundled services; the key format and the account are the same for all of them.

Terms on the card and in the account

Eight terms a subscriber meets on the card, at norton.com/setup and under My Subscriptions; a sentence or two on each.

Product key

The 25-character string in five hyphenated groups. The maker uses the one name throughout; the hyphens are separators and the key has no special characters.

Theft-protected key

The maker’s term for a retail key that works only after the shop has reported the sale. An unscanned box carries a key that reads correctly and still fails.

Norton account

The record at my.norton.com. The key is used once, then displayed under My Subscriptions beside the subscription it created.

My Subscriptions

The account view that lists each subscription’s end date, product key, devices and renewal setting. The true renewal date and amount are read here.

TechBench card

An activation card printed with a product key and sold through computer-service shops. It works like any other retail key and is stored in the account after use.

PIN from a service provider

A code issued by a telecom or broadband company that bundles the product. Provider editions are managed partly through the provider’s own portal.

Automatic renewal

The billing setting the retail flow may ask to enrol at setup, on norton.com, inside the purchaser’s own session. The setting and its date are shown in the account.

Norton 360, AntiVirus Plus, LifeLock

Edition names. The edition sets the device allowance and bundled services; the key format and the account are the same for all of them.

Read next

Documentation consulted

Scroll to Top