CurseForge vs Modrinth: where to download Minecraft mods safely

CurseForge and Modrinth are both safe places to download Minecraft mods: they check new files before they go live, and most creators publish on both. The differences are mainly in what they host, their apps and who runs them, not in how safe they are.

Below you’ll find the two side by side, what has gone wrong in the past and how to spot a trustworthy mod yourself. As of 7 October 2026.

CurseForge and Modrinth side by side

How safe are CurseForge and Modrinth?

Both sites check what gets uploaded. On CurseForge every file goes through automated checks, with antivirus scanners and code analysis. New versions are also reviewed by hand, except for projects with a long, clean track record. On Modrinth, moderators review every new project before it goes live, and an in-house scanner looks for malware. Since August 2026, Modrinth creators also have to disclose whether a project is AI-generated, shows adverts or collects data, and you can filter on that.

Neither is watertight. In June 2023 the fractureiser malware turned up in mods on CurseForge and BukkitDev, through hijacked creator accounts. CurseForge itself wasn’t hacked, and Modrinth found no infected projects after scanning ten months of uploads. In May 2024 Modrinth was caught out by a mod that was approved cleanly and then received an update containing malware. Modrinth removed it, explained who was at risk and released a free scanner.

The biggest risk lies outside these sites. CurseForge warns about scammers posing as well-known players and sending a “modpack” as a zip file over Discord. No site can check files like that for you. Watch out for lookalike sites with names similar to CurseForge, too: only download the app from curseforge.com.

How to spot a trustworthy mod

• Download from the source. Use CurseForge, Modrinth or the creator’s own site. According to Fabric, plenty of sites claim to offer mods but are really just spreading malware.
• Look at the creator and the page. A well-known creator, lots of downloads, recent updates and a link to the source code are all good signs.
• Check the version and loader. A mod for 26.2 won’t simply work on 26.3, and a Fabric mod won’t run on NeoForge.
• Be wary of zip files from other people. Install a modpack from its official page or through the app, not from a file someone sends you. The CurseForge app now warns you about suspicious files in an imported pack.
• Antivirus helps, but not always. Fabric advises against relying on it entirely.

Which app should you use?

An app saves you hunting through folders: you create a profile with a Minecraft version and a loader, and install mods with one click. All three below are free.

• CurseForge app: for Windows, macOS and Ubuntu. On Windows you can choose between a standalone app and a version that runs through Overwolf. Share Profile lets you share your profile as a zip or as a code that stays valid for seven days. The paid Premium tier removes adverts.
• Modrinth App: an open source launcher for Windows, macOS and Linux, still labelled beta. It manages your mods, exports a modpack as .mrpack and brings in instances from other launchers, including the CurseForge app. The paid Modrinth+ removes adverts.
• Prism Launcher: an open source launcher that fetches mods from Modrinth and CurseForge and opens both kinds of modpack. Some CurseForge creators don’t allow other programs to download their files, in which case Prism tells you which mods to fetch yourself.

The standard Minecraft Launcher can’t install modpacks on its own. For installing individual mods by hand, see How to install Minecraft mods on Java.

Modpacks with friends

With a modpack, everyone has to play exactly the same version. A CurseForge pack is a .zip with a manifest, and when importing, the CurseForge app by default only installs files that are genuinely hosted on CurseForge. Modrinth uses .mrpack, the only format you can upload to Modrinth. On Modrinth, every mod shows whether it belongs on the server, with the players or on both. Mods for visuals and performance, such as Sodium or shaders, only belong with the players.

Mods on your own server

On a Minecraft server at CakeHosting, the Mods section of the game panel searches Modrinth directly, and under Modpacks you install packs from Modrinth, CurseForge and Feed The Beast, among others, with the right loader included. The full walkthrough is in install mods and modpacks on your server, and running a modpack server with friends helps you pick a pack for your group.