Feedback How to protect games

People how should i make my unity game secure like is there any tool which will secure my game from getting hacked .It is a DESKTOP game as of now.

 

Would you mind providing some detail instead of just saying hacked?
Also seeing you just joined just a few days ago, how come you created a game that's being hacked?

 

Sorry for the tittle ,auctully I got scared because I am creating a game and suddenly a thought popped up that does unity have some sort of protection for their games .I googled it and the first result which came was unity games can be easily hacked so I got even more scared.I know about the Ixgaurd but it is for mobile application.

 

Ruchir do you know about anything which will help ?

 

I myself am not really an expert in this matter but there are a few common practices you can follow:
Like instead of storing your health as

Code (CSharp):

1. int heath = 100;

You do:

Code (CSharp):

1. private float _health; // This is health + 5 (or any other no.)
2. public int Health
3. {
4.     get => (int)(health - 5);
5.     set => health = value + 5;
6. }

This will discourage player from using things like cheat engine,
Also, There's this asset https://assetstore.unity.com/packages/tools/utilities/anti-cheat-toolkit-152334
you can search for what you are specifically looking for too
Also, for multiplayer, you can look into server authoritative designs

 

AFAIK the major way to hack your game is using debugging assembly tools like dnspy to get your source code from your compiled game. There are even tutorials on Youtube to learn how. Now I heard that using LI2CPP will prevent that since there are no convenient ways to decompile your game. But since this is posting on Multiplayer, I guess you need to host a dedicated authoritative server for your game.

 

https://mirror-networking.gitbook.io/docs/guides/cheating
For multiplayer you can look into this article(in the initial comment I forgot that this was a multiplayer forum )

 

So LI2CPP will not work for multiplayer games ? If it will then how to implement it in the game ?

 

Well I am new to unity so how should I implement the authoritative design in game ?

 

Any idea about guardingpearsoftware free assets productivity ?

 

My advice would be go ahead and make the game regardless.

If it gets so popular that hacking becomes a problem, then you'll be making enough money from it by then that you can pay someone to make it secure.

 

What kind of hacking are you worried about? If you're talking about typical multiplayer cheats, like flying through the air, shooting through buildings, etc, you best protect against that by not trusting any information from the client. You do the simulation on the server, and just take inputs from the client. You also verify all of those client inputs on the server.

But that only covers a specific kind of hacking.

 

Look at this

 

Trust me this is the best advice here for you

My advice would be go ahead and make the game regardless.



If it gets so popular that hacking becomes a problem, then you'll be making enough money from it by then that you can pay someone to make it secure.

 

I am not do worried about them but those ones which interfere with the game codes

 

Very informative thanks

 

Yeah I know but if know all of this right now I can implement them when I building the game

 

Ok guys I was scrolling the project settings and found something called save file names as hashes ,so I wanted to know what does it do if I enable it

 

@Ruchir @Xentios @rango302 how can I enable LI2CPP in game or check if it is there because the articles I read resulted that it is a good way of protecting the game

 

You can enable IL2CPP in Build Settings > Player Settings > Other Settings by selecting IL2CPP in the Scripting Backend dropdown (You'll find it under the Configuration heading).

 

Thank you.

 

IL2CPP Isn't a form of game protection. It just makes getting to your code slightly less trivial compared to a mono build.

 

Oh ok

 

Thank you everyone for your help really appreciated

 

If you use IL2CPP, make sure to encrypt your metadata file. Tools exist that create all the dlls you are trying to protect using GameAssembly.dll and global-metadata.dat.

Genshin Impact for example has extra protection so you can't just reverse it with a few clicks. It's still possible, but it adds another wall. Which is what this is all about, since everything can be reverse engineered. Although this is especially effective against script kiddies.

Search for a IL2CPP dumper, to know what the majority use.

 

Can you share some tools with me please, I found fairguard but the website was not secure

 

@PutridEx please share some tools

 

https://www.guardsquare.com/en/blog/securing-unity-games-dexguard-and-ixguard-how-it-works

 

Ok so how do I download it and any other you would recommend ? Any tool for pc games

 

@PutridEx can we do it manually ?

 

Pretty sure you can. I can't help you any further, although I have messed around with dumping il2cpp, I haven't encrypted it before. But there are games that do it, Genshin, Rust for example.

The link I posted here a while ago talks about encrypting metadata, to prevent easy dumping of il2cpp.
Good luck.

 

Oh ok ,thanks for your help ,really appreciated .What I understood is that I should obfuscate the meta file code and I already have an awesome asset for it called guardian pear software

 

Thanks dude

 

Hi guys can you please help me here
https://forum.unity.com/threads/mobile-input.1088113/
@PutridEx @Ruchir @Joe-Censored @Xentios @Munchy2007

 

Please don't ping random people. People will reply to your thread if they feel they have something to contribute.

 

Yeah very sorry.

 

Sorry guys for the inconvenience I caused ,I promise it will not happen again

 

Personally I think all this is a fools errand. If your game is single player, then you shouldn't waste so many cycles trying to restrict how players choose to play the game. If they want to cheat, change how the game plays, or skip right to the end, so what?

If your game is networked multiplayer, then focus your efforts on locking down the server and not trusting anything coming from the client (go server authoritative for as much as possible, and be careful about not providing the client with too much information). None of this involves local binary or meta file obfuscation.

edit: Just realized that last message was about getting attention to another thread instead of the meta file obfuscation issue. Oops, but I stand by my comment anyway

 

Hahaha , thanks for the reply

 

I agree with him about the online game... You should not care what the cheater does with the game client, you can make a shadow ban when detecting cheats and let him think that he hacked the game

 

Oh ok thanks

 

Any chance you could expand on what you mean by this?

 

After detecting cheats, do not change the player's statistics, do meanness, collect all cheaters on one server (or lobby)

 

I'd recommend https://assetstore.unity.com/packages/tools/utilities/mfuscator-256631