Launcher safety

The one rule that outranks the rest: your Microsoft credentials belong in Microsoft’s own sign-in flow and nowhere else. A window that imitates that flow inside unknown software is how accounts get stolen. This site hosts no launchers and links to none except the official one.

Red flags, in the order you meet them

1. Distribution: arrival via video descriptions, Discord DMs, or forum attachments rather than a maintained project page with history.
2. Promises: “free premium,” “account generator,” “token login” — each one is either fraud on its face or fraud in a trench coat.
3. Credential handling: a password field of its own instead of handing you to the official Microsoft page in a verifiable way.
4. Install behavior: requests for administrator rights it cannot justify, bundled “offers,” or an updater that replaces itself from unverifiable hosts.

The boring safe path

The official launcher from minecraft.net covers every supported version of the game — including the historical ones, via installation profiles. Established open-source community launchers exist and some are excellent, but evaluating them is on you, using the flags above; this desk deliberately does not maintain a blessed list, because a stale recommendation is a liability dressed as a favor.

If you already ran something suspicious

1. Change your Microsoft account password from a different, trusted device.
2. Review the account’s active sessions and sign out everywhere; enable two-factor authentication.
3. Run a reputable malware scan before trusting the machine with credentials again.