Xodus Cracks Xbox Authentication and Game Package Decryption to Bring PC Game Pass to Linux

August 11, 2026
Github.com

Developers behind the Heroic Games Launcher have unveiled Xodus, an open-source initiative designed to bridge the gap between PC Game Pass and Linux systems. Announced on August 10, 2026, Xodus has already tackled two significant hurdles: Xbox identity authentication and the decryption of encrypted MSIXVC packages. This project represents a pivotal step in making Microsoft’s subscription gaming library accessible to the millions of gamers on Linux and macOS who have been unable to enjoy local Game Pass play.

For users of Steam Deck, desktop Linux, and Mac, the implications are immediate. Currently, the only method to access Game Pass on non-Windows devices is through Xbox Cloud Gaming, which necessitates a Game Pass Ultimate subscription priced at .99 per month. This option introduces latency typical of streaming services and requires a stable internet connection for every gaming session. Xodus aims to provide a more direct alternative, allowing users to download and play Game Pass titles locally, akin to how Steam users run Windows games via Proton.

The Barrier Proton Cannot Solve

Many gamers attempting to run Xbox PC titles on Linux through Proton have encountered a common obstacle. The issue is not related to DirectX; Valve’s DXVK and VKD3D-Proton effectively translate Direct3D 8 through 12 into Vulkan. Nor is it about x86 instructions, which run natively through Wine, the underlying compatibility layer for Proton.

The real challenge lies within Microsoft’s GDK (Game Development Kit) ecosystem, which comprises three components: the GDK runtime, Xbox identity services, and encrypted MSIXVC packages—the format used for distributing PC Game Pass titles. This trio forms a cryptographic chain that, as detailed by Tom’s Hardware, requires a game installed via the Xbox app to check its license against Xbox identity services through a Windows-only DLL named xgameruntime.dll. Only after decrypting its executable on demand can the game launch. Without all three components functioning in unison, the game fails to start, often without any error message.

This explains why DRM-free versions of Xbox PC titles operate smoothly under Wine and Proton when obtained separately, while those downloaded through the Xbox app do not. The executables are encrypted, and the decryption key resides within the Xbox authentication pipeline.

What Xodus Has Actually Built

Xodus addresses the problem through a layered architecture, with each component targeting a specific aspect of the GDK chain.

At the authentication layer, the project has developed xal-rs, an Xbox Authentication Library written in Rust. This library manages the OAuth-style flows necessary for signing into a Microsoft account, acquiring Xbox Live tokens, and verifying Game Pass entitlements against Microsoft’s servers using legitimate subscription credentials. Importantly, this is not an attempt at credential theft or account bypass; it mirrors the authentication flow executed by the Xbox app, reimplemented in an open-source library capable of operating outside of Windows.

For the runtime layer, the team has created an open-source reimplementation of xgameruntime.dll, which games rely on for license checks and Xbox service access. This DLL operates within a custom Wine fork that includes Xbox-specific patches. A second repository builds upon this Wine fork, integrating these changes into a custom Proton fork, ensuring that the entire stack—Windows API translation, DirectX-to-Vulkan translation, and Xbox runtime emulation—functions cohesively. Xodus connects the runtime service layer to the Wine game process via a Unix domain socket named xodus.sock, a standard inter-process communication mechanism for Linux and macOS.

At the package layer, Xodus can retrieve MSIXVC game packages using a valid Game Pass subscription, obtain the necessary licenses from Microsoft’s distribution infrastructure, and decrypt game executables on demand for local storage. The project’s GitHub repository provides comprehensive documentation on its structure and the current status of each component.

As a result, Xodus has successfully navigated the authentication and licensing pipeline, a challenge that previously lacked a public open-source solution. Developer imLinguin confirmed in a Reddit comment that authorization and game downloads are operational, with the team now concentrating on the game SDK layer needed to launch titles.

What Remains Before Games Actually Run

However, completing the authentication and decryption pipeline does not equate to finalizing the project. Several critical gaps remain.

Current development efforts are focused on emulating the GDK Gaming Services layer—the Windows system component that games expect to find running in the background during initialization. Microsoft’s GDK documentation indicates that testing GDK-built PC games on Windows necessitates the installation of the “Gaming Services” package. Xodus must replicate sufficient elements of this service layer within Wine for games to initialize successfully before any other code executes. Until this is accomplished, even fully authenticated and decrypted game packages will not launch.

At present, the project lacks a distributable release for general users. The interface is a developer-facing command-line tool, devoid of a graphical launcher. To provide an end-user experience where individuals can select a game from a library and click play, significant additional work is required—most likely integration with the Heroic Games Launcher, which the team has identified as a planned target alongside Lutris and Bottles.

Additionally, the project does not yet support UWP-based titles—older Game Pass games created prior to Microsoft’s adoption of the GDK, such as Gears of War 4 and early Forza Horizon titles. These games utilize a different package architecture that Xodus is not currently targeting.

A Format Race Lurking in October

A timing pressure that has been largely overlooked in initial coverage of the project is the transition Microsoft is making to a new package format called MSIXVC2. Introduced in preview with the April 2026 GDK, MSIXVC2 is set for General Availability with the October 2026 GDK—just two months away. This new format allows for more granular handling of game update deltas, with testing on previously released titles revealing update sizes reduced by 64 to 94 percent compared to the legacy MSIXVC format. This efficiency is significant for publishers and platform holders, creating urgency for new titles to adopt it swiftly.

Currently, Xodus’s readme indicates that MSIXVC2 support is incomplete. If new Game Pass titles are primarily released in the MSIXVC2 format after October, Xodus’s existing implementation will target a legacy format while the active catalog evolves. The XenoSpectrum analysis of Xodus’s milestones highlights this as a key constraint on the project’s practical scope. The Xodus team is aware of this challenge, but implementing a second complete pipeline to accommodate the new format will be necessary before broad catalog support can be claimed. While this is not an insurmountable issue, it mirrors the ongoing challenges faced by Wine and Proton throughout their histories.

BedrockonLinux Sets the Precedent

The Xodus team is not venturing into uncharted territory without a proof of concept. BedrockonLinux 2.0, another open-source project, employs similar reverse-engineering techniques to bring Minecraft Bedrock Edition—migrated to the GDK—onto Linux. This project enables the game to communicate in real-time with Xbox Live through a secure authentication pathway, even functioning within the sandboxed SteamOS environment of a Steam Deck.

The continued success of BedrockonLinux is significant beyond its technical validation. It illustrates that Microsoft has, thus far, tolerated such interoperability projects—those that necessitate valid, paid licenses and do not facilitate piracy, yet allow legitimately licensed content to run on unsupported platforms. The legal framework underpinning this tolerance aligns with the principles that have governed Wine and Proton for over three decades: clean-room reimplementation of APIs and runtime behavior aimed at interoperability rather than circumventing copy protection.

Nevertheless, as noted by GamingOnLinux, a practical risk persists that no legal analysis can mitigate: Microsoft could modify its authentication infrastructure at any moment, disrupting compatibility without any legal repercussions. Such changes could involve deprecating an API endpoint, rotating authentication keys, or instituting a new handshake that Xodus would need to reverse-engineer.

Why the Timing Matters for Linux Gaming

The share of Linux users on Steam has surged significantly over the past two years, reaching 5.33 percent in the March 2026 Steam Hardware Survey—more than double the 2.3 percent recorded a year prior. PCWorld highlighted this March surge as the first instance of Linux surpassing five percent on Valve’s platform. The July 2026 survey indicated Linux remained above four percent at 4.01 percent, reflecting typical month-to-month fluctuations while staying well above historical averages. With Steam’s estimated 132 million monthly active users, this four percent translates to over five million Linux gamers.

For a meaningful subset of these users—and the estimated five million Steam Deck owners—PC Game Pass has been a compelling reason to delay a full transition to Linux. The only workaround, Xbox Cloud Gaming, requires the pricier Ultimate tier (.99 per month), introduces latency, and eliminates offline play. Xodus promises to alleviate all three of these constraints for supported titles.

In parallel, Microsoft has been expanding its investment in PC gaming. The company has broadened Xbox backward compatibility to PC, with leaked documents suggesting that Xbox 360 titles may soon be available on the platform. Ironically, this expansion increases Xodus’s potential scope, as more titles may be supported as Microsoft continues to integrate its catalog into the GDK/MSIXVC distribution pipeline.

Can You Use Xodus Right Now?

Currently, Xodus is not accessible in any meaningful way for general users. The project remains in early development, offering only a developer-facing command-line interface without end-to-end game launch capabilities. The Heroic Games Launcher team has yet to announce a timeline for a public release.

What Xodus has achieved is a noteworthy engineering milestone: it has resolved the authentication, licensing, and package decryption challenges that previously rendered this category of project seemingly insurmountable. The remaining tasks—emulating the Gaming Services layer, supporting MSIXVC2, developing a graphical launcher, and conducting per-game compatibility testing—are considerable. However, they represent the kind of iterative engineering work that the Linux gaming community has successfully undertaken numerous times before. Developers with relevant expertise can now contribute to the project through the public GitHub repository at xodus-gaming.


Frequently Asked Questions

Can PC Game Pass games run on Linux right now through Xodus?

Not yet for general users. Xodus has solved Xbox authentication, package licensing, and MSIXVC decryption, but end-to-end game launch is still in development. The project currently offers only a developer-facing command-line interface. Games cannot yet be downloaded, installed, and played through a consumer-ready launcher. The team’s next major hurdle is emulating the GDK Gaming Services layer inside Wine, which games require to successfully initialize.

What does Xodus actually do that Wine and Proton don’t?

Wine and Proton already handle DirectX-to-Vulkan translation and Windows-to-Linux API calls. What they cannot do is authenticate with Microsoft’s Xbox identity servers, acquire PC Game Pass licenses, or decrypt MSIXVC game packages—because those systems are proprietary and require reimplementing specific Xbox runtime components. Xodus adds those missing pieces: the xal-rs authentication library in Rust, an open-source reimplementation of xgameruntime.dll, and an MSIXVC decryption pipeline. It sits on top of Wine and Proton rather than replacing them.

Does Xodus work with all PC Game Pass titles?

No. Xodus targets modern GDK-based titles distributed in the MSIXVC format. Older titles built on the Universal Windows Platform (UWP)—such as Gears of War 4 and early Forza Horizon releases—are not supported and are not a stated goal of the current project. Additionally, Microsoft is transitioning to a new MSIXVC2 format (General Availability planned for October 2026), which Xodus does not yet support—creating a potential gap for titles that ship after that transition.

Is Xodus legal to use?

Xodus occupies the same legal gray area as Wine, Proton, and BedrockonLinux—projects that reimplement Windows or Xbox runtime behavior through clean-room reverse engineering, specifically for interoperability, without enabling piracy. Users of Xodus must hold a valid, paid PC Game Pass subscription and use their own legitimate licenses. No legal challenge has been brought against Wine, Proton, or BedrockonLinux despite decades of operation. Microsoft has not commented on Xodus specifically. The more realistic risk is not litigation but that Microsoft could alter its authentication infrastructure at any point, breaking compatibility without any legal action.

AppWizard
Xodus Cracks Xbox Authentication and Game Package Decryption to Bring PC Game Pass to Linux