OpSec Enhanced

OpSec Enhanced

A client-side Fabric mod that protects you from client fingerprinting, tracking exploits, and other privacy leaks — without needing to run a modified server.

Note: OpSec Enhanced is an independently maintained fork of aurickk/OpSec (upstream is no longer actively maintained). It is not affiliated with the original author.

What it protects against

• Client Spoofer — advertise as vanilla (or Lunar Client / Badlion Client) and block every other mod's network channels, keybinds, and translation keys from leaking your mod list
• Key Resolution Protection — blocks the sign/translation-key exploit servers use to probe which mods and keybinds you have
• Resource Pack Fingerprinting — per-account (and per-server) pack cache isolation, local-URL blocking, and the ability to strip a forced server pack's textures/sounds while keeping chat translations working normally
• Known-Pack & Shader Filtering — strips mod-injected pack identifiers and blocks server packs from overriding another mod's shaders (used for GUI-crash / GPU-DoS griefing)
• Meteor Fix — patches Meteor Client's broken key-resolution defense so it doesn't out itself
• Telemetry Blocking and Chat Signature Control — stop Mojang telemetry and strip chat message signing when you don't want messages cryptographically tied to your account
• Cookie Isolation — refuses to store server-set cookies (MC 1.20.5+), which otherwise persist across reconnects and server transfers as a ready-made cross-session tracker

OpSec Enhanced additions

• Encrypted Account Storage — saved session/refresh tokens are AES-256-GCM encrypted at rest, not plaintext
• Skin/Cape Correlation Alerts — warns when two of your saved accounts share a skin or cape texture, a real way alts get linked to a main
• Chat Link/Command Guard — confirmation prompt before a clicked chat/sign/book message silently copies your clipboard or runs a command, plus a heads-up for phishing-shaped links (raw IP, punycode, look-alikes)
• DPI Evasion (TLS Fragmentation) — splits the mod's own update-check/integrity-check TLS handshake across TCP segments to dodge naive SNI-based blocking (useful in regions with aggressive DPI filtering)
• Randomize Skin / Cape — generates a fresh procedurally-colored skin (no third-party site involved) and cycles between capes you actually own — doubles as a fix if the correlation alert flags two accounts sharing a look
• Random Nickname Generator — one click to fill a plausible username when adding an offline account
• Per-Server Profiles — save different protection/spoof settings tied to a specific server address, auto-applied on reconnect
• HUD Indicator & Theming — optional on-screen status label, accent color, and a compact layout option for the settings menu
• Client Information Normalizer — reports a fixed, common language/view-distance/chat-mode/skin-layers/main-hand combo instead of your real settings, since that exact combination is itself a fingerprint
• Scrub Pack Download Headers — neutralizes the X-Minecraft-Username/UUID/Version/Pack-Format and User-Agent headers vanilla sends when downloading a server resource pack, even to third-party CDNs
• Command History Guard — redacts /login, /register, /changepassword etc. arguments before Minecraft writes them to command_history.txt
• Auto-Purge Pack Cache On Exit — optional full wipe of the downloaded-pack cache on game close, on top of per-account isolation
• Lazy Server List Ping — stops the multiplayer screen from auto-pinging every saved server on open, each ping otherwise being an unrequested connection/IP disclosure
• Jar Integrity Mirrors — the startup integrity check falls back through GitHub Releases and CurseForge if Modrinth doesn't have a match, instead of silently skipping

Requirements

• Minecraft 1.20 – 26.3
• Fabric Loader 0.16.0+ (0.18.5+ for MC 26.1.x)
• Fabric API

Configuration

Open settings via the OpSec button in the multiplayer server list, or through Mod Menu (optional — not a hard dependency).

Disclaimer

OpSec is a privacy tool designed to protect players from unwanted client fingerprinting and tracking. It is not intended or encouraged for use in bypassing server rules, evading bans, or gaining unfair advantages. Users are responsible for complying with the rules and terms of service of any server they connect to.

Credits

• aurickk/OpSec — upstream project this is forked from
• ExploitPreventer, LiquidBounce, Meteor Client, No Chat Reports — see the GitHub README for full per-feature sourcing