Security & Verification

Every BMM release publishes its SHA-256 checksums so you can verify that what you downloaded is exactly what was released — this page shows the current release's verification data.

Official downloads

BeamNG Mod Manager is distributed only through the official channels listed below. A download from anywhere else is not an official release — verify its checksum before trusting it.

Digital signature

Current releases are not yet code-signed, so Windows SmartScreen may show an "unknown publisher" warning. Code signing under the publisher name Skidpad Studios is in progress; until then, verify your download with the SHA-256 checksums below.

Current release verification

Version: 0.8.45 · Release date: 2026-08-28

File: BeamNG-Mod-Manager-0.8.45-Setup.exe

SHA-256: 7d27069c40a251e482b3b145cbcef6e03c2299f71cec3b79acc128f832cbd2e3

View VirusTotal analysis

File: BeamNG-Mod-Manager-0.8.45-Portable.exe

SHA-256: 0aa4ffa11222ab289ba1c643575fc400b441bf89425ff9d2bd74a54b12550da5

View VirusTotal analysis

View the GitHub release

To verify: open PowerShell in your download folder and run Get-FileHash .\BeamNG-Mod-Manager-0.8.45-Setup.exe -Algorithm SHA256 — the result must match the SHA-256 shown above exactly.

Privacy & network behavior

BMM reads your mod library folder ("Mod Storage"), the BeamNG/BeamMP mod folders you point it at, and BeamNG's own statistics file. It modifies only its own library and the mod links it creates — it never edits game files, outside of two explicit user-clicked actions that are documented in the app.

By default, nothing identifying leaves your PC. Optional anonymous telemetry (off until you opt in) counts six events: app launch, onboarding completion, theme changes, external link clicks, and Patreon connect start/success. Mod names, file paths, and files themselves are never transmitted.

Network calls are: checking for app updates (the check runs automatically at launch and when you click Check — nothing ever downloads or installs without your click), fetching the BeamMP server list, mod update checks and downloads you initiate against the official BeamNG repository, fetching BMM's curated creator-support and supporter data from our own server, and Patreon membership verification if you connect a Patreon account.

Report a security issue

Found a vulnerability? Email security@beammodmanager.xyz. Please include the app version and steps to reproduce. You'll get an acknowledgement within a few days.