Yes, Modrinth is safe. It is one of the two major platforms for downloading Minecraft mods, shaders, resource packs, and modpacks. Here is how it protects users.
How Modrinth Keeps Mods Safe
- Automated malware scanning: Uploaded files are scanned before they become available for download
- Manual review: New projects go through a review process before public listing
- Open source: Modrinth's platform code is open source on GitHub, so the community can audit it
- Verified authors: Project owners are tracked and accountable
- Report system: Users can report suspicious uploads
Is Modrinth Safer Than CurseForge?
| Feature | Modrinth | CurseForge |
|---|---|---|
| Malware scanning | Yes | Yes |
| Project review | Yes | Yes |
| Open source platform | Yes | No |
| Community reporting | Yes | Yes |
| History of malware incidents | Rare | Had fractureiser incident in 2023 |
Both platforms are safe for normal mod downloads. CurseForge had a notable malware incident in mid-2023 (fractureiser) where compromised developer accounts uploaded malicious files. CurseForge responded quickly and improved their scanning. Modrinth was less affected but also tightened security.
Best Practices
- Download mods only from Modrinth or CurseForge
- Avoid random mirror sites or Discord file shares
- Check mod download counts and reviews
- Keep your launcher and Java updated
- Use a reputable launcher like Prism Launcher, CurseForge app, or Modrinth app
Is Modrinth Better Than CurseForge?
Neither is objectively better for safety. Both scan uploads and review projects. Modrinth has a cleaner interface and open source code. CurseForge has a larger mod library historically. Many mod authors publish on both platforms.
FAQ
Is Modrinth safe to download mods from? Yes. Modrinth scans uploads, reviews new projects, and has an open source platform.
Are all mods on Modrinth safe? No platform can guarantee every file forever, but every upload passes automated malware scanning and new projects pass human review before listing. The residual risk sits with compromised author accounts, which is rare and historically hit CurseForge harder than Modrinth.
Can Modrinth have viruses? It is possible in principle, which is why the scanning and review pipeline exists, but there has been no significant confirmed case of malware distributed through Modrinth. Sticking to well-known projects with high download counts reduces the remaining risk to near zero.
Does Modrinth check for viruses? Yes. Files are scanned automatically at upload, and new projects are additionally reviewed by a human before they go public.
Can I trust Modrinth? Yes. Beyond the scanning pipeline, the entire platform is open source, so its security practices are publicly auditable in a way CurseForge's are not.
Has Modrinth ever had malware? No major malware incident has been attributed to Modrinth specifically. The 2023 fractureiser incident primarily affected CurseForge.
Is Modrinth or CurseForge safer? Both are safe. Modrinth's open source platform adds transparency. CurseForge has a longer track record and larger library.
Should I use Modrinth or CurseForge? Use whichever has the mods you need. Many mods are on both. You can also use Prism Launcher which searches both.
Related: CurseForge vs Modrinth comparison, Modrinth vs CurseForge vs Prism Launcher, Is Prism Launcher Safe? Yes, and Here Is Why
How Modrinth Moderates Uploads
Modrinth's safety model is different from CurseForge's, and understanding the difference matters.
Every project uploaded to Modrinth goes through a human review before it becomes publicly listed. Moderators check the description, the license, and that the files match what the project claims to be. Mods are also scanned, and Modrinth publishes its moderation queue openly, which CurseForge does not.
The important nuance: review happens at upload time. A mod that was safe in January could ship something nasty in a June update. That risk exists on every platform, but Modrinth's open-source client and transparent moderation make it easier to audit what changed.
The 2022 CurseForge Incident (Why People Ask This)
The reason "is modrinth safe" is a popular search at all is the CurseForge malware incident, where compromised accounts uploaded infected mod updates and the fractured modpack ecosystem spread them before anyone noticed. Several big mods were affected.
Modrinth's structural answer to that: mandatory two-factor options for authors, signed releases, and a much younger, smaller library where moderation can actually keep up. Not bulletproof, but the attack surface is smaller.
What Can Actually Hurt You
Mod files are code. Anything you download and run has theoretical risk, from any site. The realistic threats:
Typosquatted mods. A fake upload with a name one letter off a popular mod. Modrinth's review process catches most of these because moderators check names against existing projects.
Compromised author accounts. The CurseForge attack vector. Modrinth requires better account security, but you should still check a mod's update history. A mod that suddenly adds unrelated "features" after a quiet year is worth a second look.
Outdated downloads. The biggest practical risk is not malware, it is downloading a mod version incompatible with your Minecraft version and corrupting a world. Modrinth's version filters handle this better than most platforms.
Safe Habits Regardless of Platform
- Download from the official project page, not a rehost site
- Check the version filter matches your Minecraft and loader (Fabric/Forge/NeoForge/Quilt)
- Look at the download count and last update date. A mod with 5 downloads and no source link deserves skepticism
- Prefer mods with linked source code (GitHub/GitLab). Modrinth shows source links prominently
- Keep a backup of your world before adding new mods to an existing save
Modrinth App vs Website Downloads
The Modrinth App installs mods directly into the right instance and folder, which removes the most common user error: dropping a Fabric mod into a Forge mods folder. If you are new to modding, the app is the safer route.
Manual downloads from the website are fine too, just verify the file goes into the correct loader's mods folder and that you grabbed the right game version.
Modrinth vs CurseForge on Safety
| Modrinth | CurseForge | |
|---|---|---|
| Human review on upload | Yes | Partial |
| Moderation transparency | Public queue | Closed |
| Source code links | Prominent | Optional |
| Library size | Smaller | Massive |
| Incident history | None major | 2022 malware incident |
Neither is "unsafe." Modrinth just has a cleaner track record and more transparent process.
FAQ
Is Modrinth safe to download mods from? Yes. Mods are reviewed before listing and the platform has no major malware incidents on record. Normal caution applies: check versions and download counts.
Can Minecraft mods have viruses? Any code you run can theoretically be malicious. Stick to official project pages, check update history, and prefer mods with public source code.
Is the Modrinth App safe? Yes. The app is open source, so anyone can audit what it does. It installs mods into the correct folders, which also prevents loader-mismatch mistakes.
Why do some mods only exist on CurseForge? Author choice, mostly monetization through CurseForge's reward program. Modrinth has its own creator monetization now, so the gap is shrinking.
Does Modrinth scan files? Yes, uploads are scanned and human-reviewed before public listing. Updates to existing projects go through automated checks.