> ## Documentation Index
> Fetch the complete documentation index at: https://docs.seraph.si/llms.txt
> Use this file to discover all available pages before exploring further.

# Introduction

## Staying Safe with Seraph

Security is a paramount concern when using third party modifications. To ensure your account and personal data remain protected, please adhere to the following safety protocols.

***

### Official Sources Only

The most common vector for account compromise is the use of "cracked" or unofficial versions of software.

* **Verify the Domain:** Always ensure you are downloading from `seraph.si`.
* **Avoid Third Party Reuploads:** Never download the launcher from Discord attachments, file sharing sites (like MediaFire or Mega), or YouTube descriptions.
* **Checksums:** Verify the SHA-256 hash of your download to ensure the file hasn't been tampered with.
* **Certification:** On Windows, Right click the file, Click properties and Check the file has a valid signature.

### Protecting Your Authentication Token

<Warning>
  **Never share your `token.json` file.** If someone gains access to this file, they can impersonate your account on the Seraph backend. We will never ask you to send us this file for support.
</Warning>

When you sign in via Discord, the launcher generates a `token.json` file. This token is a **credential** that allows the client to communicate with our servers as "you."

### Understanding Process Injection

Seraph utilises process injection for clients like Lunar Client and Badlion Client (BLC). While this is a standard technique for sideloading mods, it can sometimes trigger "False Positives" in antivirus software.

* **Heuristic Scanning:** Some antivirus tools may flag the launcher because it interacts with other running applications (Minecraft).
* **Whitelisting:** If the official launcher is blocked, add an exception for `%AppData%\Seraph\` rather than disabling your firewall entirely.

### Social Safety

Beyond technical security, be wary of "Social Engineering" within the community.

1. **Staff Identification:** Official staff members will have unique roles in the Discord. Anyone DMing you claiming to be "Support" and asking for files or passwords is a bad actor.
2. **Plugin Safety:** If you use Seraph alongside other Forge mods, ensure those mods are also from reputable sources (CurseForge, Modrinth). A malicious mod in your `mods` folder can read your Seraph configuration.