Trust & security

Trust the download,
verify the bits

What the project publishes openly, how to hash-check installers, and what security decisions stay on your side as a player.

SOURCE CODEPUBLIC

LICENSEGPL-3.0

PACKAGE SOURCEVERIFIED

PROJECTCOMMUNITY RUN

BUILD11.0.3

License

GPL-3 in everyday terms

Run, study, modify, and share Prism Launcher under GNU GPL version 3. If you redistribute builds, downstream users keep the same freedoms.

The license covers launcher code — not Minecraft assets, Mojang services, or third-party mod licenses.

Community stance

Honest packaging only

Prism champions user freedom and redistributability without claiming Mojang endorsement. Mirrors should label origin, version, and checksums clearly.

Open source

Audit-friendly repository

Browse the tree on GitHub before trusting a binary. Match release tags to the version string on our download page — currently 11.0.3.

PrismLauncher/
├── launcher/
├── libraries/
├── cmake/
├── program_info/
└── LICENSE

Source view

Definitions

Trust grid

Source: Public GitHub repo under GPL-3 — diff releases, read commits, build yourself if motivated.
Builds: Download page links to official GitHub assets with published SHA256 sums — skip mystery mirrors.
Warnings: SmartScreen and antivirus heuristics measure reputation, not intent. Treat them as signals to verify, not verdicts.
Mods: Third-party jars carry their own risk. Vet modpacks like any code you execute.
Accounts: Microsoft login talks to Mojang or Microsoft services; Prism caches session data locally per instance.
Scope: This page explains Prism Launcher trust — not legal advice or platform policy documents.

Malware clarification

Why AV sometimes panics

Launchers download libraries, spawn Java, and write instance folders — behavior heuristic engines notice. Quarantine after an official install is often a false positive; restore carefully, re-hash, then see Guides for allowlisting steps.

Your checklist