PiTyUs.Hire me

Business

Asset escrow: protecting and buying FiveM resources

How Cfx.re asset escrow works: what file types are protected (Lua, YFT, YDD, YDR), uploading and updating assets on the Portal, escrow_ignore for config files, the 'You lack the required entitlement' error, NUI not being encrypted, Tebex delivery, subscriptions, and what buyers can and cannot edit.

Updated 10 min readBy PiTyUs · FiveM developer

Overview

Most paid FiveM resources are escrowed: encrypted by Cfx.re and tied to the buyer’s account, so they only run on servers owned by someone who bought them. For sellers that is copy protection; for buyers it explains why some files cannot be opened and what “lack the required entitlement” means.

What escrow protects

File typeEscrowed?
Lua scriptsYes
YFT, YDD, YDR modelsYes
NUI (HTML/JS/CSS)No
Files listed in escrow_ignoreNo — left readable
From Cfx.re’s asset escrow documentation.

01For sellers: publishing

  1. On portal.cfx.re, choose Create an asset and upload your zipped resource (max 1 GB).
  2. Wait for processing; the encrypted version appears under Created Assets.
  3. In Tebex, create a package that delivers a “FiveM Asset” and pick your asset.
  4. To update, Re-Upload on the Portal — buyers who downloaded older versions keep them.
fxmanifest.lua — keep configs editablelua
escrow_ignore {
    'config.lua',
    'locales/*.lua',
    'stream/*.ytd',
}

Selling setup and pricing: selling scripts on Tebex and script pricing.

For buyers: installing and errors

Message / situationMeaning
You lack the required entitlementThe server’s licence key belongs to an account that does not own the asset
Resource runs locally but not on the hostThe host server uses a different account’s licence key
Cannot open a .lua fileIt is escrowed; only escrow_ignore files are editable
Stopped working after a subscription endedSubscription assets are removed when it expires

The key point: the entitlement follows the Cfx.re account that owns the server’s licence key. Keys are explained in the licence key guide.

What escrow means for customisation

  • Anything not in escrow_ignore cannot be edited — ask the seller for config options or open bridge files.
  • Escrowed models cannot be optimised or retextured by the buyer.
  • Obfuscation on top of escrow is unnecessary.
  • Escrowed assets cannot be transferred between accounts.

Frequently asked questions

What is FiveM asset escrow?

Cfx.re’s system that encrypts Lua and model files so a resource only runs on servers owned by accounts that bought it.

What does “You lack the required entitlement” mean?

The account that owns the server’s licence key has not purchased that escrowed asset.

Can I edit an escrowed script?

Only files the seller excluded with escrow_ignore, usually configs.

Is NUI protected by escrow?

No. NUI files are not encrypted.

Can I transfer an escrowed resource to another account?

No. Transfers are not supported.

Need this built, not just explained?

Ten years of FiveM work, from Lua to NUI

Custom resources, React NUI, ESX / QBCore / Qbox integration, OneSync performance audits and security reviews — plus the websites and SEO around your server brand.

Related guides