Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
VGSources
Blog

Is Modrinth Safe? What Minecraft Players Need to Know Before Downloading Mods

Modrinth is a legitimate, actively moderated Minecraft platform, but it is not risk-free. Learn what its safeguards do, what happened in the Windows Borderless incident, and how to download and test mods more safely.
Length10 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Yes—Modrinth is generally safe to use, but it is not risk-free. Modrinth is a legitimate Minecraft content platform operated by Rinth, Inc., with project moderation, malware scanning, user reporting, security disclosures, and account-protection features. However, those safeguards do not guarantee that every mod, plugin, or modpack is harmless. In May 2024, Modrinth removed a malicious project called Windows Borderless after users reported it.

The practical answer is to treat Modrinth like any software repository: download from the official site or a trusted launcher integration, inspect projects and dependencies, keep your software updated, retain antivirus protection, and be especially cautious with unfamiliar or newly uploaded projects.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What is Modrinth?

Modrinth is a platform for discovering and downloading Minecraft mods, modpacks, resource packs, shaders, plugins, and related projects. It also operates the Modrinth App and provides an API used by supported launcher integrations.

Modrinth is not an official Minecraft service. Minecraft and related trademarks belong to their respective owners, while Modrinth is operated independently by Rinth, Inc.

#1 Best Overall
Sale
Razer BlackShark V2 X Xbox Gaming Headset, 3.5mm Audio Jack, Black | 50mm Drivers, Cardioid Mic, Lightweight, Comfortable Noise Isolating Earcups, for Xbox Series X, Series S, PS5, PC, Switch
  • TRIFORCE TITANIUM 50 MM DRIVERS — Our cutting-edge proprietary design divides the driver into 3 parts for the individual tuning of highs, mids, and lows—producing brighter, clearer audio with richer highs and more powerful lows
  • HYPERCLEAR CARDIOID MIC — An improved pickup pattern ensures more voice and less noise as it tapers off towards the mic’s back and sides, with the sweet spot easily placed at the mouth because of the mic’s bendable design
  • ADVANCED PASSIVE NOISE CANCELLATION — Sturdy closed earcups fully cover the ears to prevent noise from leaking into the headset, with its cushions providing a closer seal for more sound isolation
  • LIGHTWEIGHT DESIGN WITH MEMORY FOAM EAR CUSHIONS — At just 240 g, the headset features thicker headband padding and memory foam ear cushions with leatherette to keep gaming in peak form during grueling tournaments and training sessions
  • WORKS WITH WINDOWS SONIC — Make the most of the headset’s powerful drivers by pairing it with lifelike surround sound that places audio with pinpoint accuracy, heightening in-game awareness and immersion

That distinction matters: Modrinth is a third-party software and content platform, not a guarantee from Mojang or Microsoft that every file hosted there is safe.

Why Modrinth is considered relatively trustworthy

Modrinth has several meaningful safety controls that make it a more credible source than an unknown download site or an unsolicited file link.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Content rules prohibit deceptive and harmful projects

Modrinth’s Content Rules prohibit illegal, deceptive, impersonating, and harmful content. They also prohibit projects designed to upload user data to a remote server without clear disclosure.

Project pages are expected to explain what a project does, why someone would download it, and other important information users need before installing it. Authors are also expected to provide accurate metadata and dependencies and may not simply reupload another creator’s project without permission.

These rules are useful signals when evaluating a download, but rules are not proof that every uploaded file is benign. A malicious author can violate the rules until the project is detected and removed.

Projects are reviewed and suspicious code can receive additional scrutiny

Modrinth says its content moderators review submitted projects for compliance with its rules and Terms of Use. Its help documentation also describes an in-house malware-scanning tool that can flag suspicious code for manual technical review.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Review is not the same as a security certification. Mods, plugins, and especially modpacks can be difficult to assess because they may contain multiple files, dependencies, scripts, and update paths. A project may also change after its initial review when an author uploads a new version.

Users can report projects, versions, and accounts

Users can report problems through the Report button on project, version, or user pages, or contact Modrinth support. This provides an important layer of community detection.

Rank #2
Sale
Ozeino Wireless Gaming Headset for PS5, PC, Switch| Lossless Audio-40H Batt | Play & Charge, 2.4GHz USB & Type-C, Flip Mic, Works with PS4, Mac, laptop, mobile, Ideal for FPS, RPG
  • 【Amazing Stable Connection-Quick Access to Games】Real-time gaming audio with our 2.4GHz USB & Type-C ultra-low latency wireless connection. With less than 30ms delay, you can enjoy smoother operation and stay ahead of the competition, so you can enjoy an immersive lag-free wireless gaming experience.
  • 【Game Communication-Better Bass and Accuracy】The 50mm driver plus 2.4G lossless wireless transports you to the gaming world, letting you hear every critical step, reload, or vocal in Fortnite, Call of Duty, The Legend of Zelda and RPG, so you will never miss a step or shot during game playing. You will completely in awe with the range, precision, and audio quality your ears were experiencing.
  • 【Flexible and Convenient Design-Effortless in Game】Ideal intuitive button layout on the headphones for user. Multi-functional button controls let you instantly crank or lower volume and mute, quickly answer phone calls, cut songs, turn on lights, etc. Ease of use and customization, are all done with passion and priority for the user.
  • 【Less plug, More Play-Dual Input From 2.4GHz & Bluetooth】 Wireless gaming headset adopts high performance dual mode design. With a 2.4GHz USB dongle, which is super sturdy, lag<30ms, perfectly made for gamers. Bluetooth mode only work for phone, laptop and switch. And 3.5mm wired mode (Only support music and call).
  • 【Wide Compatibility with Gaming Devices】Setup the perfect entertainment system by plugging in 2.4G USB. The convenience of dual USB work seamlessly with your PS5,PS4, PC, Mac, Laptop, Switch and saves you from swapping cables.

In the Windows Borderless case, a user report led to staff investigation and removal. Reporting is therefore not merely theoretical, but it is also not a substitute for checking a file before running it.

Modrinth publishes security information and fixes

Modrinth maintains a security disclosure process and has published fixes for vulnerabilities affecting the Modrinth App, including issues involving .mrpack importing.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

That is a positive sign that the platform has an ongoing security process. It also illustrates an important point: the App, its file formats, and its surrounding services can have vulnerabilities. Keep them patched rather than assuming that a reputable platform never needs security updates.

Account security features are available

Modrinth recommends enabling two-factor authentication (2FA) to protect an account. Its Terms of Use also place responsibility on users to protect their credentials and report unauthorized access.

Use a unique password for Modrinth, enable 2FA, and do not reuse a password associated with your email, Microsoft account, or other gaming services.

The Windows Borderless incident: evidence that Modrinth is not risk-free

On May 7, 2024, Modrinth published a disclosure about a malicious Minecraft project named Windows Borderless. Modrinth specifically distinguished it from similarly named projects such as Borderless Mining and Borderless Mining Reworked.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

According to Modrinth’s disclosure:

  • Affected files were uploaded between May 2 and May 6, 2024.
  • An early malicious version sent identifying information about the user’s computer to a Discord webhook.
  • Later versions included credential and token stealers.
  • A user report was submitted on May 6.
  • Modrinth staff decompiled and investigated the mod, then removed the project and related CDN links within minutes of confirmation.
  • Approximately 372 distinct IP addresses downloaded affected files.
  • Modrinth described the exposure level as low, while advising affected users to delete the mod, change passwords, and monitor bank and credit-card accounts.

This incident should not be interpreted as evidence that all Modrinth downloads contain malware. It demonstrates the narrower, more useful lesson: even a reputable and moderated platform can temporarily host a malicious upload.

Moderation and scanning lower the likelihood of encountering harmful content. They cannot guarantee that every file is safe at the exact moment you download or execute it.

Rank #3
Sale
Ozeino Gaming Headset for PC, Ps4, Ps5, Xbox Headset with 7.1 Surround Sound Gaming Headphones with Noise Canceling Mic, LED Light Over Ear Headphones for Switch, Xbox Series X/S, Laptop, Mobile White
  • Immersive 7.1 Surround Sound: This gaming headset delivering stereo surround sound for realistic audio. Whether you're in a high-speed FPS battle or losing yourself RPG adventures, this Ps5 headset provides crisp treble, punchy bass, and precise directional cues, giving you a competitive edge
  • Great Humanized Design: Comfortable and breathable permeability protein over-ear pads perfectly on your head, adjustable headband distributes pressure evenly, you’ll enjoy lasting comfort during hours of gaming and suitable for all gaming players of all ages
  • Sensitivity Noise-Cancelling Microphone: 360° omnidirectionally rotatable sensitive microphone, premium noise cancellation, sound localisation, your voice comes through loud and natural, ensuring your teammates catch every callout, even in chaotic battle scenes.
  • Universal Compatibility: This gaming headphone support for PC, Ps5, Ps4, Xbox one, Xbox Series X/S, Switch, Laptop, Mobile Phone and other devices with 3.5mm jack.Note 1: When you use headset on your PC, be sure to connect the "1-to-2 3.5mm audio jack splitter cable" (Red-Mic, Green-audio). (Please note you need an extra Microsoft Adapter when connect with an old version Xbox One controller)
  • Cool style gaming experience: Colorful RGB lights create a gorgeous gaming atmosphere, adding excitement to every match. Heightening immersion for FPS, MOBA, and action titles. These eye-catching lights give your setup a gamer-ready look while maintaining focus on performance. (*Note: The USB connector is for LED lighting only)

How to check whether a Modrinth project looks safe

Before installing an unfamiliar mod or modpack, work through this checklist.

  1. Use the official source. Download the Modrinth App from the official Modrinth domain, or use a trusted launcher integration. Avoid mirrors, shortened links, advertisements that redirect through unknown domains, and unsolicited files sent through Discord or social media.
  2. Check the exact project name and author. Look for impersonation, near-identical names, suspicious reuploads, or an author with no meaningful history. A familiar-looking name is not enough; the Windows Borderless disclosure itself warned readers not to confuse the affected project with similarly named projects.
  3. Confirm Minecraft and loader compatibility. Check the supported Minecraft version and whether the project is for Fabric, Forge, NeoForge, Quilt, or another loader. An incompatible file may simply fail to load, but incorrect metadata and unexplained dependencies are warning signs.
  4. Read the description and dependencies. The page should clearly explain the project’s purpose and list required dependencies. Be cautious when a “performance,” “utility,” or “free cape” project makes unusually attractive claims without explaining how it works.
  5. Review versions and update history. Newly uploaded projects and sudden updates deserve more caution than established projects with a consistent history. This is not proof that a new project is malicious; it means there is less history for the community and moderators to evaluate.
  6. Inspect unexpected behavior. A Minecraft mod should not unexpectedly request your Microsoft password, Discord token, browser data, or unrelated account credentials. Do not enter credentials into a mod, a launcher prompt from an unfamiliar source, or a third-party download page.
  7. Keep antivirus warnings enabled. Do not dismiss a security warning solely because the file came from Modrinth. Modrinth’s Terms of Use disclaim a guarantee that its service or downloaded material will be free of viruses or other harmful components.

Is the Modrinth App safe?

The Modrinth App is an official Modrinth product, but “official” does not mean invulnerable. Like any launcher, it should be downloaded from the official Modrinth source and kept current.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Modrinth’s changelog has documented security fixes, including fixes related to importing .mrpack files. Install App updates when offered, and avoid opening modpack files obtained from unknown sources. If your operating system, antivirus software, Java runtime, or Minecraft launcher is outdated, update those as well.

There is also an important difference between the safety of the App itself and the safety of content installed through it. A secure launcher can still download a malicious project if a harmful upload passes through moderation before detection.

Privacy is separate from malware safety

A platform can have reasonable security controls while still collecting usage and account information. Modrinth’s privacy policy says the service may collect information such as a user ID, playtime, projects played, Minecraft version and loader metadata, IP address, device metadata, and interaction data collected through PostHog.

The policy states that view and download data are anonymized after 24 months and that personal information is removed from those records during anonymization. Policies can change, so review the current version if data collection is a significant concern.

For better account privacy and security:

  • Use a unique password and enable 2FA.
  • Share as little personal information as necessary in profiles, project pages, and support requests.
  • Review the current Modrinth privacy policy before deciding which account and analytics settings are acceptable to you.
  • Remember that privacy concerns and malware concerns are different questions. Data collection does not automatically mean a platform is malicious, and malware protection does not mean no usage data is collected.

What to do if you already ran a suspicious mod

If a mod behaved strangely, triggered an antivirus alert, or came from an unverified source, treat the situation as a possible security incident rather than simply deleting the Minecraft instance.

  1. Stop using the affected device for sensitive accounts. Disconnect it from the internet if appropriate, especially if you suspect active data theft. Do not continue logging into email, banking, Microsoft, Discord, or other important services from that computer.
  2. Remove the suspicious mod and preserve useful details. Record the project name, version, download date, launcher, and any antivirus alert before deleting files if those details may help with reporting. Do not run the file again to “test” it.
  3. Run a full security scan. Use your installed, reputable antivirus or endpoint-security software and follow its quarantine or remediation instructions. A second opinion can be useful, but no scanner guarantees detection of every threat.
  4. Change passwords from a clean device. Prioritize your email, Microsoft account, Modrinth account, Discord, financial services, and any account that reused the same password. The Windows Borderless response specifically advised affected users to change passwords.
  5. Revoke active sessions and tokens. Sign out other sessions and rotate or revoke tokens where the service provides that option. This is especially important if the suspicious mod may have accessed browser sessions, Discord credentials, or authentication tokens.
  6. Enable 2FA. Use an authenticator app or another strong method supported by the account. Two-factor authentication helps prevent password-only account takeover, although it cannot clean an infected computer.
  7. Monitor financial and personal accounts. Check bank and credit-card activity and watch for password-reset emails, new-device alerts, or other unexpected account activity. Modrinth included financial-account monitoring in its Windows Borderless guidance.
  8. Report the project. Use Modrinth’s report function on the relevant project, version, or account page, and include the version and evidence you recorded.
  9. Reinstall or reset only when warranted. If scans identify a serious infection, credentials were stolen, or suspicious behavior continues, follow your security vendor’s remediation guidance. A complete operating-system reinstall may be appropriate for a confirmed compromise, but it should not be the automatic response to every false positive.

A PC-cleanup utility may help identify potentially unwanted applications or some known malware, but it is not a replacement for dedicated antivirus, password resets, token revocation, or professional incident response when sensitive accounts are at risk. For Windows users who want an additional check after a suspicious download, a secondary Windows scan can be considered only as a complement to—not a substitute for—your existing antivirus protection.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to use Modrinth more safely

  • Use the official Modrinth domain or a trusted launcher integration.
  • Verify the exact project, author, version, loader, dependencies, and update history.
  • Be cautious with brand-new projects, reuploads, and exaggerated utility claims.
  • Never provide Microsoft, Discord, email, browser, or financial credentials to a mod or unknown download page.
  • Keep the Modrinth App, Minecraft launcher, Java, operating system, and antivirus updated.
  • Test unfamiliar mods in a separate instance.
  • Back up important worlds before installing large or unfamiliar modpacks.
  • Keep antivirus protection enabled and investigate warnings.
  • Enable Modrinth 2FA and use a unique password.
  • Report suspicious projects instead of distributing them to friends.

Verdict: should you download from Modrinth?

For most Minecraft players, Modrinth is a reasonable and comparatively trustworthy place to obtain mods and modpacks. Its rules, review process, malware scanning, reporting system, security disclosures, and 2FA support are meaningful positives.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
Logitech G432 Wired Gaming Headset - Black | DTS Headphone:X 2.0, 50 mm audio drivers, USB and 3.5 mm jack, Flip-to-Mute mic, PC compatible
  • Enjoy expansive cinematic sound. Big 50 mm audio drivers deliver an incredible sound experience
  • Hear Enemies From All Sides. DTS Headphone:X 2.0 surround sound(1) lets you hear enemies sneaking behind you, special ability cues, and immersive environments. It’s positional clarity that can make the difference between victory and defeat. Experience three-dimensional audio that goes beyond 7.1 channels to make you feel like you’re right in the middle of the action. (1) DTS Headphone:X 2.0 requires Logitech G HUB Software.
  • Be Heard Loud and Clear. The big 6 mm boom mic makes sure you’re heard by gaming partners and mutes when flipped up.
  • Use One Headset For Most Game Platforms. Your headphones work with your PC or Mac via USB DAC or 3.5 mm cable, mobile devices with 3.5 mm cable or with gaming consoles including PlayStationⓇ 5 and PlayStationⓇ 4 (USB wireless stereo sound only), Nintendo Switch (wireless stereo sound when docked)
  • Game for Hours in Comfort. Everything about these headphones is about comfort: The deluxe lightweight leatherette ear cups and headband are made to keep pressure off your ears. Ear cups rotate up to 90 degrees for convenience.

But Modrinth is not “100% safe,” virus-free, or guaranteed malware-free. The Windows Borderless incident is direct evidence that a malicious upload can reach users before detection and removal. Modrinth’s own Terms also state that downloads are used at the user’s own risk and do not guarantee that downloaded material is free from harmful components.

The best conclusion is simple: use Modrinth, but use it like any software repository. Prefer official downloads, inspect projects and dependencies, keep your software patched, retain antivirus protection, protect your account with 2FA, and take suspicious behavior seriously.

Disclosure: A secondary PC-repair or security utility may be useful for a Windows follow-up scan, but such software should complement—not replace—dedicated antivirus and proper account-recovery steps.

Frequently Asked Questions

Is Modrinth safer than downloading Minecraft mods from random websites?

Generally, yes. Modrinth has project rules, moderation, malware scanning, reporting, and a published security process. However, it is not risk-free, so inspect downloads and keep antivirus protection enabled.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can Modrinth mods contain viruses or malware?

They can. Modrinth disclosed a malicious Windows Borderless project in May 2024 that included information-stealing and later credential- and token-stealing behavior. The project was removed, but the incident shows that moderation is not an absolute guarantee.

Is the Modrinth App safe to install?

The official Modrinth App is a legitimate launcher, but it should be downloaded from the official Modrinth source and kept updated. Modrinth has published fixes for App security issues, including vulnerabilities involving .mrpack importing.

Should I disable antivirus when installing a Modrinth mod?

No. Do not disable antivirus merely because a file came from Modrinth. Investigate the warning, verify the project and file, and use the security software’s documented remediation process.

What should I do if I ran a suspicious Modrinth mod?

Stop using the affected device for sensitive accounts, remove the mod, scan the computer, change passwords from a clean device, revoke active sessions or tokens, enable 2FA, monitor financial accounts, and report the project to Modrinth.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does Modrinth collect personal data?

According to its privacy policy, Modrinth may collect account and usage information including identifiers, playtime, projects played, game and loader metadata, IP address, device metadata, and interaction data. Review the current policy for the latest details.

The Bottom Line

Bottom line: Modrinth is legitimate and generally safe enough for normal Minecraft use, but no mod repository can promise that every upload is harmless. Use official sources, check project details, keep security tools updated, enable 2FA, and respond promptly if a mod behaves suspiciously.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.