Is AFK Console Client safe?
Short answer: yes. Here's exactly what that means and why.
Account authentication
We use Microsoft's official OAuth flow to authenticate Minecraft accounts. When you click "Add account", you're redirected to login.live.com where you sign in directly with Microsoft - your password is entered into Microsoft's page, not ours. Microsoft hands us a short-lived authentication token, which is what we use to connect your account to Minecraft servers.
We never see, store, or process your Microsoft password. The same is true for any 2FA codes, recovery emails, or security questions - those all stay between you and Microsoft.
For accounts that don't have Microsoft auth (offline-mode accounts on compatible servers), there's no password at all - those connect by username only.
Server-side risk: will my account get banned?
The bot behaves like a standard Minecraft client. It only sends actions a real player could perform - moving, jumping, chatting, opening menus. There's no aim-bot, no x-ray, no fly-hack, nothing a real player can't do.
That said, every server's rules are different. Some servers (Hypixel, for example) explicitly prohibit unattended gameplay. Other servers (DonutSMP) actively reward AFKing with passive income. Always check the rules of the specific server you're playing on. We document known server-specific behavior in our server guides.
Privacy and data handling
- We collect what's needed to run your subscription: email, Discord ID, Microsoft account UUIDs, server configurations.
- We don't sell, share, or rent your data to advertisers.
- Full details are in our privacy policy.
- Account chat logs are stored for debugging and are visible to you in the dashboard.
How long has MinecraftAFK been running?
Since 2022. We're a small team but the service has been continuously online for several years and currently serves thousands of paying users. You can read independent reviews on Trustpilot.
What's the actual risk?
Honestly, the main risks are:
- Your specific server bans AFK. Solution: check its rules before connecting. We can refund Tier 3 if a known-blocked server doesn't work.
- Server-side anti-cheat false-positives. Rare, but possible on servers with aggressive detection. The web client uses standard Minecraft protocol, so this should be uncommon.
- Your account gets compromised through some other route (e.g., you reuse passwords elsewhere). MinecraftAFK can't prevent that, but our OAuth flow means a breach of our servers wouldn't expose your Microsoft credentials.
If you have a specific concern, ask in our Discord - we're happy to walk through the technical details.