OpSec Enhanced
A client-side mod (Fabric & NeoForge) that protects you from client fingerprinting, tracking exploits, and other privacy leaks — without needing to run a modified server.
Note: OpSec Enhanced is an independently maintained fork of aurickk/OpSec (https://github.com/aurickk/OpSec) (upstream is no longer actively maintained). It is not affiliated with the original author.
What it protects against
- Client Spoofer — advertise as vanilla (or Lunar Client / Badlion Client) and block every other mod's network channels, keybinds, and translation keys from leaking your mod list. Lunar's brand version has its own picker with a history of known-good values, kept separate from Minecraft's version since Lunar uses its own release-numbering scheme
- Key Resolution Protection — blocks the sign/translation-key exploit servers use to probe which mods and keybinds you have
- Resource Pack Fingerprinting — per-account (and per-server) pack cache isolation, local-URL blocking, and the ability to strip a forced server pack's textures/sounds while keeping chat translations working normally
- Known-Pack & Shader Filtering — strips mod-injected pack identifiers and blocks server packs from overriding another mod's shaders (used for GUI-crash / GPU-DoS griefing)
- Meteor Fix — patches Meteor Client's broken key-resolution defense so it doesn't out itself
- Telemetry Blocking and Chat Signature Control — stop Mojang telemetry and strip chat message signing when you don't want messages cryptographically tied to your account
- Cookie Isolation — refuses to store server-set cookies (MC 1.20.5+), which otherwise persist across reconnects and server transfers as a ready-made cross-session tracker
OpSec Enhanced additions
- Encrypted Account Storage — saved session/refresh tokens are AES-256-GCM ent, with owner-only file permissions
- Skin/Cape Correlation Alerts — warns when two of your saved accounts share l way alts get linked to a main
- Chat Link/Command Guard — confirmation prompt before a clicked chat/sign/bour clipboard or runs a command, plus a heads-up for phishing-shaped links (raw
IP, punycode, look-alikes)
- Game Connection Proxy — route the actual multiplayer connection through a SOCKS5/HTTP proxy; auxiliary traffic like the Cloudflare ping relay now follows the same proxy instead of
leaking your real IP separately
- DPI Evasion (TLS Fragmentation) — splits the mod's own update-check/integrity-check TLS handshake across TCP segments to dodge naive SNI-based blocking (useful in regions with aggressive DPI filtering)
- Randomize Skin / Cape — generates a fresh procedurally-colored skin (no thiycles between capes you actually own — doubles as a fix if the correlation
alert flags two accounts sharing a look
- Random Nickname Generator — one click to fill a plausible username when add
- Per-Server Profiles — save different protection/spoof settings tied to a sppplied on reconnect
- HUD Indicator & Theming — optional on-screen status label, accent color, and a compact layout option for the settings menu
- Client Information Normalizer — reports a fixed, common language/view-distan-hand combo instead of your real settings, since that exact combination isitself a fingerprint. On by default — it only changes what the server sees, never your actual settings
- Scrub Pack Download Headers — neutralizes the X-Minecraft-Username/UUID/Vernt headers vanilla sends when downloading a server resource pack, even tothird-party CDNs
- Command History Guard — redacts /login, /register, /changepassword etc. args them to command_history.txt
- Auto-Purge Pack Cache On Exit — optional full wipe of the downloaded-pack c per-account isolation
- Lazy Server List Ping — stops the multiplayer screen from auto-pinging everping otherwise being an unrequested connection/IP disclosure
- Jar Integrity Mirrors — the startup integrity check falls back through GitH Modrinth doesn't have a match, instead of silently skipping
Loaders & Requirements
Fabric — Minecraft 1.20 – 26.3
- Fabric Loader 0.16.0+ (0.18.5+ for MC 26.1.x)
- Fabric API
NeoForge — Minecraft 1.21.1, 1.21.11, 26.2
- No extra dependency
- Mod Whitelist's AUTO mode isn't available (no equivalent to Fabric's globaluse BLOCK ALL or CUSTOM instead. Every other feature works the same as Fabric.
Configuration
Open settings via the OpSec button in the multiplayer server list, or throughom/mod/modmenu) (Fabric only — NeoForge builds use just the OpSec button).
Disclaimer
OpSec is a privacy tool designed to protect players from unwanted client fings not intended or encouraged for use in bypassing server rules, evading bans,or gaining unfair advantages. Users are responsible for complying with the rules and terms of service of any server they connect to.
Credits
- aurickk/OpSec (https://github.com/aurickk/OpSec) — upstream project this is
- ExploitPreventer, LiquidBounce, Meteor Client, No Chat Reports — see the Giure sourcing
Source Code
- Github (https://github.com/SU4G3/OpSec-Enhanced) — official Github link
