Non ancora tradotto in Italiano: mostrato in inglese.
Torna alle notizieHow Microsoft sign-in works — and why we never see your password
Microsoft sign-in in PatronLauncher completes in your browser on Microsoft’s own page. Here is what happens behind the scenes and how we think about privacy.
“Is it safe to sign in to a launcher with my Microsoft account?” It is the question we get most. Short answer: yes, because your password never enters the launcher.
The flow
- When you press “Sign in with Microsoft”, your default browser opens login.microsoftonline.com.
- You complete sign-in there, on Microsoft’s page. If you use two-step verification, it runs there too.
- Microsoft redirects your browser to
http://localhostwith a short-lived code. The launcher picks it up and exchanges it for an access token using PKCE (Proof Key for Code Exchange). - The token is turned into a game profile via Xbox Live and Minecraft services.
This is the same flow used by Mojang’s official launcher and other reputable third-party launchers.
Where is it stored?
Session tokens live encrypted in Windows Credential Manager under the PatronLauncher.Microsoft entry. No token is written to settings files or logs, and none is ever sent to the UI layer.
Local accounts
For offline play you can create a local player name. These accounts cannot join servers that require Microsoft authentication; they are for single-player and local use. Playing Minecraft online requires a valid Java Edition license.
Mojang approval
Third-party launchers need their application ID approved by Mojang to access the Minecraft API. Our application has been submitted; once approved it will work without any update on your side. We will announce progress here.
