DarqlineMP

Is DarqlineMP safe?

What the launcher does on your computer, what it connects to, and how to check that a download is genuine.

On this page

The Windows warning

DarqlineMP is not Authenticode-signed yet, so Windows may show a SmartScreen warning ("Windows protected your PC") the first time you run the installer. Before continuing, check the installer as described below. Then choose More info and Run anyway.

Updates are downloaded and checked by the launcher itself and don't show this warning.

Check a download

Each release lists the SHA-256 checksum of its files in SHA256SUMS. If one byte of a file changes, its checksum changes too.

  1. Open the folder with the installer, right-click an empty spot and choose Open in Terminal.
  2. Run:
    Get-FileHash .\DarqlineMP_*_x64-setup.exe
  3. Compare the result with the line in SHA256SUMS on the release page. If they match, the file is the one we published.

Releases are also signed with the project's minisign key. The launcher checks this key before installing any update and refuses anything else.

RWRqpLwd08q7pLgX9ahLFW6lhFohMXCfzLAgo23LJ75qTaforf2W1U6b

What it does on your PC

The launcher

  • installs for your Windows user only, without administrator rights
  • starts DarqlineMP together with the game when you join a server
  • installs only updates signed with the project key
  • uninstalls from Windows settings like any other app

It doesn't

  • change or replace game files
  • install drivers, services or anything that starts with Windows
  • show ads or use trackers
  • send crash reports: they stay on your computer

What it connects to

updates.darqline.comchecks for updates
github.comdownloads the update files
api.darqline.comloads the server list
Game serversonly the ones you join

Antivirus warnings

An app that loads a library into a game can look suspicious to antivirus software, especially without a code-signing certificate. Every build is submitted to Microsoft for analysis before release. If your antivirus blocks a DarqlineMP file:

  1. Check its SHA-256 checksum as shown above.
  2. Open an issue on GitHub with the checksum and the name of the detection.

Please don't turn your antivirus off. Add an exception for the DarqlineMP folder only as a last resort, after checking the checksum.

Report a security problem

Write to security@darqline.com instead of posting it publicly. What you may test and how reports are handled is described in the Security Policy.