Image Credit: Bethesda
Forgot password
Enter the email address you used when you joined and we'll send you instructions to reset your password.
If you used Apple or Google to create your account, this process will create a password for your existing account.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Reset password instructions sent. If you have an account with us, you will receive an email within a few minutes.
Something went wrong. Try again or contact support if the problem persists.
When-Will-Minecraft-Frogs-be-Added-to-the-Game

Mojang Patches Log4j Bug that Left Minecraft Java Edition Accounts at Risk for Hacking

This article is over 2 years old and may contain outdated information

The developer of the famous Minecraft game Mojang Studios recently announced the threat of hacking players’ computers. This only applies to Minecraft Java Edition accounts as the reason was in the logging library. In this guide, we will tell you what you need to do to secure your account.

Recommended Videos

How to Protect Your Account

As stated, the problem was in the Java logging library which is also called Log4j. The Log4j exploit became a threat because it affected Minecraft Java Edition among other services. This exploit posed a potential threat to your account and could also cause your computer to be compromised.

In the new version of Minecraft: Java Edition 1.18.1, this problem was fixed, and the exploit was also patched in other versions of the client. However, Mojang Studios still gave a few instructions to keep players safe.

RELATED: BTS Minecraft Virtual Concert: ‘Butter’ and ‘Permission to Dance’ Video Link

If you are playing Minecraft: Java Edition without hosting your own server, then you just need to reboot the Launcher. Close the launcher and all active game windows. When you launch the launcher again, the patched version will download automatically.

For players who have their server, the instructions will be different depending on the version.

  • For 1.18 and 1.17 you need to write JVM arguments defined in the startup command line:

-Dlog4j2.formatMsgNoLookups = true

We recommend upgrading 1.18 to 1.18.1 whenever possible so that you don’t add JVM arguments.

  • For 1.12-1.16.5 you will have to download a special file from the official developer site and add again JVM arguments to the command line:

-Dlog4j.configurationFile = log4j2_112-116.xml

  • For 1.7-1.11.2, the order is the same, only the file to be loaded and the argument differ:

-Dlog4j.configurationFile = log4j2_17-111.xml

If you are using modified clients or third-party launchers, then there is a chance that they will not update automatically. We recommend that you contact a third-party provider, otherwise you are putting yourself at risk.

Author