Skip to main content

​
Staying Safe with Seraph

Security is a paramount concern when using third party modifications. To ensure your account and personal data remain protected, please adhere to the following safety protocols.

​
Official Sources Only

The most common vector for account compromise is the use of “cracked” or unofficial versions of software.
  • Verify the Domain: Always ensure you are downloading from seraph.si.
  • Avoid Third Party Reuploads: Never download the launcher from Discord attachments, file sharing sites (like MediaFire or Mega), or YouTube descriptions.
  • Checksums: Verify the SHA-256 hash of your download to ensure the file hasn’t been tampered with.
  • Certification: On Windows, Right click the file, Click properties and Check the file has a valid signature.

​
Protecting Your Authentication Token

Never share your token.json file. If someone gains access to this file, they can impersonate your account on the Seraph backend. We will never ask you to send us this file for support.
When you sign in via Discord, the launcher generates a token.json file. This token is a credential that allows the client to communicate with our servers as “you.”

​
Understanding Process Injection

Seraph utilises process injection for clients like Lunar Client and Badlion Client (BLC). While this is a standard technique for sideloading mods, it can sometimes trigger “False Positives” in antivirus software.
  • Heuristic Scanning: Some antivirus tools may flag the launcher because it interacts with other running applications (Minecraft).
  • Whitelisting: If the official launcher is blocked, add an exception for %AppData%\Seraph\ rather than disabling your firewall entirely.

​
Social Safety

Beyond technical security, be wary of “Social Engineering” within the community.
  1. Staff Identification: Official staff members will have unique roles in the Discord. Anyone DMing you claiming to be “Support” and asking for files or passwords is a bad actor.
  2. Plugin Safety: If you use Seraph alongside other Forge mods, ensure those mods are also from reputable sources (CurseForge, Modrinth). A malicious mod in your mods folder can read your Seraph configuration.