# Keychain<\/p>\n
**Switch Minecraft accounts in-game without restarting.** A *Keychain* button is added to your title screen and pause menu. Click it, pick *Add Online*, and the **real Microsoft sign-in page** opens in your browser. Sign in normally \u2014 email, password, 2FA \u2014 and your account appears in the list. Click any saved account to switch to it instantly.<\/p>\n
## Features<\/p>\n
– \ud83d\udd11 **One-click account switching** \u2014 click any saved account in the list, you’re switched. No restart.
\n– \ud83c\udf10 **Real Microsoft login** \u2014 opens `login.microsoftonline.com` in your browser. Same form Microsoft uses everywhere. Email, password, 2FA, all official.
\n– \ud83d\udc64 **Offline accounts** \u2014 pick a username, switch immediately. Same `OfflinePlayer:` UUID derivation vanilla uses.
\n– \ud83d\udd12 **Encrypted at rest** \u2014 your saved tokens are AES-GCM-encrypted with a key tied to your machine. Anyone who copies your `.minecraft` folder gets unreadable data.
\n– \ud83d\udeab **Zero telemetry** \u2014 only talks to Microsoft and Mojang’s official endpoints. No phoning home, no analytics.
\n– \u26a1 **Tiny** \u2014 ~50 KB jar. No bundled browser, no native libs.
\n– \ud83e\uddf9 **Clean UI** \u2014 top-left button, two big actions, click-to-switch, right-click-to-remove.<\/p>\n
## How it works<\/p>\n
Keychain uses the **OAuth 2.0 Authorization Code flow with PKCE** \u2014 the same flow MultiMC, Prism Launcher, and Auth Me use. When you click *Add Online*:<\/p>\n
1. Keychain starts a tiny local HTTP server bound to `127.0.0.1` on a random free port. The local server only exists during the ~5-minute sign-in window and shuts down immediately afterwards.<\/p>\n ## Privacy<\/p>\n – \ud83d\udd10 **AES-GCM encryption** of ` ## Installation<\/p>\n 1. Install **Fabric Loader** for Minecraft 26.1.x. ## Compatibility<\/p>\n – \u2705 **Minecraft 26.1, 26.1.1, 26.1.2** (Fabric) ## FAQ<\/p>\n **Why does the Microsoft consent screen say “Auth Me for Minecraft”?** **Is this safe for my Microsoft account?** **Will my token file leak if I share my .minecraft folder?** **Can I sign in to multiple accounts and switch?** **Does it work on servers?** ## Source & support<\/p>\n – \ud83d\udc1b **Report an issue** —<\/p>\n *Made by Domsimus.*<\/p>\n","protected":false},"excerpt":{"rendered":" Switch between Microsoft and offline Minecraft accounts in-game with the real Microsoft login. No codes, no restart, encrypted at rest.<\/p>\n","protected":false},"featured_media":90194,"template":"","meta":{"_minecraft_slug":"keychain","_minecraft_project_id":"mP4sIk4b","_minecraft_author":"Domsimus","_minecraft_license":"MIT","_minecraft_downloads":18,"_minecraft_follows":1,"_minecraft_client_side":"required","_minecraft_server_side":"unsupported","_minecraft_storage_type":"zip","_minecraft_archive_name":"keychain.zip","_minecraft_size_bytes":104979,"_minecraft_version_count":2,"_minecraft_updated_at":"2026-05-16T12:14:27.970532Z","_minecraft_date_created":"2026-05-13T07:29:05.455735Z","_minecraft_date_modified":"2026-05-13T15:44:04.111362Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/keychain","_minecraft_icon_attachment_id":90194,"_minecraft_imported_at":"2026-06-05T03:35:23+00:00","_minecraft_import_hash":"28952f766dfdbe29c49602e8fad2e116","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[97,126,92],"mod_loader":[99],"minecraft_version":[83,167,163],"class_list":["post-90193","mod","type-mod","status-publish","has-post-thumbnail","hentry","mod_category-fabric","mod_category-management","mod_category-utility","mod_loader-fabric","minecraft_version-26-1","minecraft_version-26-1-1","minecraft_version-26-1-2"],"yoast_head":"\n
\n2. Your default browser opens to the official Microsoft sign-in page.
\n3. You sign in with your real credentials. 2FA and security keys work normally.
\n4. Microsoft redirects back to `http:\/\/localhost:
\n5. Keychain captures the auth code, exchanges it through the standard Microsoft \u2192 Xbox Live \u2192 XSTS \u2192 Minecraft Services chain.
\n6. Your account appears in the list, encrypted to disk.<\/p>\n
\n– \ud83d\udeb7 **No tokens in logs.** `latest.log` and crash reports never contain access tokens, refresh tokens, or auth codes.
\n– \ud83d\udee1\ufe0f **PKCE + state parameter** \u2014 protects against code interception and CSRF.
\n– \ud83c\udf10 **HTTPS-only** outbound traffic to: `login.microsoftonline.com`, `user.auth.xboxlive.com`, `xsts.auth.xboxlive.com`, `api.minecraftservices.com`. Nothing else.
\n– \ud83d\udd12 **Loopback-only** local callback server (`127.0.0.1`, never reachable over your network).<\/p>\n
\n2. Download **Fabric API** and drop it into `%APPDATA%.minecraftmods` (Windows) \/ `~\/Library\/Application Support\/minecraft\/mods` (macOS) \/ `~\/.minecraft\/mods` (Linux).
\n3. Drop the **Keychain** jar into the same folder.
\n4. Launch Minecraft. *Keychain* button is at the top-left of the title screen and pause menu.<\/p>\n
\n– \u2705 **Java 25**
\n– \u2705 Client-side only (don’t put it on your server)
\n– \u26a0\ufe0f Mid-server account switching may kick you \u2014 switch from the title screen for cleanest behaviour.
\n– \u26a0\ufe0f Skin doesn’t refresh on a server you’re already connected to. Disconnect and reconnect after switching.<\/p>\n
\nKeychain ships with a public Azure App ID registered by Auth Me (axieum), used by ~9.6 million players. If that ever gets revoked, Keychain has a built-in *Use custom Azure ID* fallback to paste your own.<\/p>\n
\nYes. The mod opens the real `login.microsoftonline.com` \u2014 you’re signing in to Microsoft directly, not to me. Verify the URL bar. Same flow as the official Minecraft launcher and every major third-party launcher.<\/p>\n
\nNo. The file is AES-GCM-encrypted with a per-machine key. Unreadable elsewhere.<\/p>\n
\nYes \u2014 that’s the entire point. Add as many as you want, click any one to switch.<\/p>\n
\nYes for switching from the title screen \/ pause menu before joining. Switching mid-game on a server will likely get you kicked because the protocol session changes.<\/p>\n
\n– \ud83d\udcbb **Source code**<\/p>\n