STEN Vault mod
A Fabric client that signs into sten.wtf, switches vault accounts in-game, and can be remote-controlled from the dashboard Mod page.
What it is
STEN Vault is the official Fabric client for sten.wtf. It signs in with sten.wtf OAuth, lists every account in your vault, and switches the in-game Minecraft session in one click. Passwords, TOTP, and recovery codes never leave sten.wtf.
Version 2.3.2 is the current jar. Version 2.0 added a dashboard page named Mod: live session, selected player, screenshots, chat, movement, account switch, and server join. Minecraft 26.1.1 / 26.1.2 / 26.2, Java 25, Fabric Loader 0.19.3+, Fabric API required.
Install
Drop the jar in mods
Fabric Loader and Fabric API in .minecraft/mods, then sten-vault-2.3.2.jar. Mod Menu, Cloth Config, YACL, Sodium, and Iris all work next to it. Config is plain JSON at config/sten-vault.json so those managers can edit it. Telemetry cannot be turned off.
Sign in with sten.wtf
Title screen → STEN Vault, or press V. Allow the OAuth prompt. Unofficial local builds ask for a 6-digit pairing code on sten.wtf. Official hashes skip that extra step.
Click an account
Rows show the skin, rank, value, networth, level, capes, and DonutSMP money. Filter by cape / min value / min Donut, and set a SOCKS5 proxy before joining. The session JWT is minted fresh on sten.wtf; the client only applies it.
Dashboard remote
Open Mod while Minecraft is running. A small command poll every 8 seconds delivers chat, WASD, join, and switch; a presence heartbeat every 60 seconds keeps the page live. Auto screenshots fire every 15 seconds. Stats refresh is a server-side accounts.refreshStats— the mod does not fetch Hypixel itself.
Telemetry
Pairing issues a device HMAC secret. Every heartbeat, crash, and screenshot must carry that MAC, a rising sequence, and a fresh timestamp. Unsigned or replayed bodies are dropped and counted. Screenshots from unofficial jars without a signed-in token are refused. IP and city are taken from the request, not the body.