DownloadIngame Account Switcher ModGet the files on 9Minecraft
Security is a primary focus of the mod, especially regarding the storage of access tokens. Accounts are stored in a dedicated folder outside the standard config directory to prevent accidental sharing.
Encryption Methods
IAS offers three levels of encryption for stored account data:
| Method | Security Level | Description |
|---|---|---|
| Password Encryption | High | Encrypts data using a user-provided password. The password is never stored on disk, only in RAM. Uses AES/GCM with PBKDF2 hashing (500,000 iterations). |
| Hardware Encryption | Medium | Uses unique hardware and OS identifiers to encrypt data. More convenient as it requires no manual password, but less secure against targeted malware. |
| No Crypt | None (Unsafe) | Stores tokens in plaintext. This is disabled by default and requires a specific config change and keybind to enable. |
Token Protection
To prevent token stealing, the mod uses "loud" filenames and disclaimers within the account storage folder. It also provides documentation on how to revoke tokens via the Microsoft account dashboard if a breach is suspected.
