One Check, Not 30 Days: Sony Clarifies PS5 DRM

Four days of panic over a 30-day countdown timer, and it turns out the answer was one login. Sony has finally issued an official statement on the new DRM system that appeared on PlayStation 4 and PS5 digital purchases last week, and the short answer is that it's far less aggressive than players feared.

"Players can continue to access and play their purchased games as usual," a PlayStation spokesperson told Game File. "A one-time online check is required after purchase to confirm the game's license, after which no further check-ins are needed."

The whole mess started when Lance McDonald, the Bloodborne modder and YouTuber, posted a screenshot of Don't Starve Together: Console Edition showing a "remaining time" counter of 20 days and a "Valid Period" end date. Other PlayStation owners discovered similar timers on newly purchased PS4 games, and the obvious conclusion was grim: Sony was quietly requiring players to phone home every 30 days or lose access to games they'd paid for. The comparisons to Microsoft's catastrophic Xbox One DRM reveal in 2013 were immediate and everywhere.

What actually appears to be happening is more mundane. New digital purchases now come with a temporary 30-day license. Once the console connects to PSN and validates the purchase, that temporary license converts into a permanent offline one. Community testing on ResetEra found that this conversion happens reliably after the initial check, and the 30-day timer disappears entirely. The prevailing theory, shared by DoesItPlay's Clemens Istel, is that this was introduced to combat a PSN refund exploit. PlayStation's refund window is 14 days, and the speculation is that the temporary license prevents users from buying a game, going offline to dodge verification, requesting a refund, and keeping the game anyway. Sony hasn't confirmed that reasoning, but it lines up.

I wrote about the initial scare earlier this week, and I'll say now what I said then: Sony brought this entirely on itself by rolling out a DRM change with zero communication. No blog post, no FAQ, nothing. Players found out because modders started poking at license files. The screenshots from PlayStation's AI support bot that circulated over the weekend were contradictory and borderline useless, which only made things worse. A single paragraph on the PlayStation Blog four days ago would have killed this story before it started.

The CBOMB Problem

Sony's statement resolves the biggest fear, but it sidesteps a second, quieter concern. Community testers found that if a PlayStation console's CMOS battery is dead, the system can't validate the online license at all. Right now, that's a niche problem. CMOS batteries last years. But consoles don't last forever, and when Sony eventually shuts down PSN support for PS4 and PS5 the way it did for PS3, a dead CMOS battery could mean permanent lockout from any game purchased under this new system. Sony has resolved similar CMOS-related issues on previous consoles before, so there's precedent for a fix, but the company's statement doesn't acknowledge the problem exists.

This whole episode also lands in an uncomfortable context. Just days before Sony's clarification, Denuvo and 2K Games introduced their own 14-day online check-in requirement for titles like NBA 2K25, NBA 2K26, and Marvel's Midnight Suns after hackers developed a hypervisor-based bypass that effectively neutralized Denuvo's anti-piracy protections. Unlike Sony's one-time check, Denuvo's system appears to be recurring. The industry is clearly tightening its grip on digital licenses right now, and players are right to pay attention to the specifics of each implementation.

Sony's version, as clarified, is about as benign as DRM gets. One check, permanent license, play offline forever after that. I can live with it. But the fact that it took nearly a week of community panic, contradictory support bot messages, and investigative work by modders before Sony bothered to explain a change it made to its own storefront is the part that sticks with me. The DRM itself isn't the problem. The silence was.