Is FireClient safe? How to check your download

People search "is FireClient safe" for a good reason: any Minecraft client installer deserves a second look before you run it. This page tells you exactly where the official download lives, what is unusual about the current build, and how to check your file yourself. It is not a guarantee, and you should make the call with the facts.

Official sources only#

Download FireClient from fireclient.net or from the official GitHub Releases page. If a file comes from a video description, a random mirror or a Discord direct message, do not run it. Links on this site point to the GitHub release file.

Why Windows may show a warning#

The current early access installer is unsigned. We do not have a paid code-signing certificate yet, so Windows SmartScreen can show a prompt for an app it does not recognise. That prompt is expected for a new unsigned installer. It does not prove the file is safe, and it does not prove it is unsafe. It means Windows has no reputation data for it yet.

Check the SHA-256 yourself#

A hash is a fingerprint of a file. If your copy has the same SHA-256 as the one published on the download page, the file was not changed on the way to you. In PowerShell:

Get-FileHash .\FireClient-Setup.exe -Algorithm SHA256

Compare the result with the hash shown on the download page. If they differ, delete the file and download it again from an official source.

Check the installer signature#

A code signature shows who signed a file and that it was not changed after signing. It does not show that the software is safe. The download panel shows the current status, and you can check it yourself. In PowerShell:

Get-AuthenticodeSignature .\FireClient-Setup.exe | Format-List Status, StatusMessage, SignerCertificate

• NotSigned: there is no signature. This is the case for the current early access build.
• Valid: signed with a certificate Windows trusts.
• UnknownError with a message about a root certificate that is not trusted: typical for a self-signed certificate. Windows does not trust those by default, so SmartScreen can still warn. If we publish a thumbprint, it should match the one in the file's Properties, Digital Signatures tab.
• HashMismatch: the file changed after it was signed. Do not run it.

You can also right-click the file, choose Properties and open the Digital Signatures tab.

Good habits for any Minecraft client#

• Never paste your Microsoft or Minecraft access token, account files or unredacted logs into a public chat
• Read what the app asks permission for, and read the Terms and Privacy notice
• Keep a backup of worlds you care about before changing game files
• Scan the file with Windows Security or your own antivirus if you want another opinion

What FireClient needs from you#

To play online you need your own Minecraft Java Edition account. FireClient does not give you the game for free. See the install guide for the full steps, and ask in the Discord if something looks wrong.