SafeAuth

Ever typed your password into Minecraft chat and immediately thought "wait, was that visible on stream / in my screen recording / to the person standing behind me"? That's what SafeAuth fixes. It's a small client-side mod that hides the password part of /login and /register right as you type it, so it's never sitting there in plain text on your screen for anyone else to read.

It's not a "streaming tool" specifically — it just hides your password. Doesn't matter if you're live on Discord, recording a video, sharing your screen for a support ticket, or someone's just walking past your monitor, the password is covered the same way either time.

Purely client-side. There's no server plugin, no server-side component, nothing to install on the server at all. SafeAuth only changes what gets drawn on your own screen — it doesn't touch, delay, log, or modify anything that actually gets sent over the network. It works by looking at your own local chat input box and covering up part of it while you type; that's the whole trick.

Features

Blurs only the password, nothing else. A lot of "just black out the text field" approaches end up covering the whole line, including the /login part, or blur an empty box before you've even typed anything, which looks broken and draws more attention than it hides. SafeAuth actually parses what you're typing, figures out exactly where the password starts (right after /login or /register ), and only covers that part. The command itself stays fully readable the whole time.

Blur is animated noise, not a flat rectangle. A solid black or gray box is easy to reconstruct from context, and on some encoders/screenshots a flat color can even bleed through slightly. Instead SafeAuth draws a shifting static/noise pattern over the password that keeps changing every frame, so there's nothing consistent for anyone to squint at even off a paused recording or a single screenshot.

Best-effort chat scrubbing. On some servers, whatever you type gets echoed back into the chat log (for example if the server doesn't cancel the message and just shows it to everyone, or shows it back to you as confirmation). On Minecraft versions where the mod loader's API actually allows intercepting that, SafeAuth also tries to catch that echoed line and cancel/hide it before it renders in your chat history, so it doesn't sit there in the scrollback for later either.

One keybind, works from anywhere. Toggling the whole thing on and off is a single key you bind once. It keeps working even while a chat screen or some other GUI is open — you don't need to close anything first, it just works.

Planned

Keyboard layout indicator. A small tag next to the blurred password showing whatever keyboard layout you're currently typing in — EN, RU, UA, BY, or KZ. If you swap layouts without noticing (which happens constantly if you use more than one language) you'd otherwise send a password full of garbage characters and have no idea why login failed. This will let you catch it at a glance before you hit enter.

Caps Lock warning. A red CAPS label that lights up next to the blur the moment Caps Lock is on. Same idea as the layout indicator — passwords are usually case-sensitive, and typing one with Caps Lock on by accident is one of the most common "why isn't this working" moments. This will make it visible immediately instead of after three failed login attempts.

Hold-to-reveal button. Right now it's all-or-nothing — the mode is either on for the whole session or off. We want to add a separate key you can hold down while a password field is focused that temporarily lifts the blur on just that one field so you can double check what you actually typed, then blurs again the second you let go. No need to flip the whole mode off and back on just to sanity-check a password.

Self-updating. SafeAuth will check on launch whether a newer version is available and, if so, quietly download it into your mods folder so it's ready to go the next time you start the game — no manually checking Modrinth or re-downloading a jar yourself. It only ever touches its own file, never anything else in your mods folder, and there'll be a config option to turn it off if you'd rather update manually.

Known issues

Binding the toggle to a letter key can reveal your password. The toggle hotkey works everywhere, including while you're typing inside the chat box itself — so if you've bound it to a letter (Z is a common pick since it's right next to WASD) and that same letter shows up anywhere in your password, typing it mid-password fires the toggle, turns streamer mode off, and reveals everything you've typed so far, instantly. This is a real, confirmed bug and we know it's a serious one. We don't have a fix ready yet, but it's the top priority right now and we're working to get it patched as fast as we possibly can. Until this is fixed, avoid binding the toggle to letter keys.

How to use

1. Bind the toggle key once in Options → Controls → Key Binds, under the SafeAuth category (unbound by default).
2. Press it whenever you want your password covered. The blur activates automatically the moment it's on — just type /login or /register as usual.
3. The keybind works from any screen, including the chat box itself.
4. Your choice is saved between sessions in the mod's config file, so you don't need to re-enable it every launch.

Supported versions

Every file below was compiled and verified against that version's real, official game mappings — not just a guessed compatibility range. Where one file covers several Minecraft versions, that span was confirmed by compiling the exact same code against each version's mappings individually.

Not available: Minecraft 1.14.4 / 1.15.2 (Forge only shipped legacy MCP mappings for these), Fabric on 1.16.5 (a Loom mapping-resolution issue with no known workaround), and Fabric/Quilt on 26.2 (Mojang has not published official Java mappings for this version yet — this is entirely on Mojang's end and gets picked up the moment they do).

Configuration

• Forge / NeoForge: config/authstreamerblur-client.toml — streamerMode (boolean)
• Fabric / Quilt: config/authstreamerblur.properties — streamerMode (boolean)

License

MIT