Questions, answered plainly.
If your question isn't here, the developer docs are more thorough, and the flag reference answers most "does it actually do anything?" questions.
-
Q
What is a "bootstrapper" and why do I need one?
A bootstrapper arranges a client's support files and starts it — flags, mods, themes, cache. You don't need one at all if the stock client is fine for you. Lurelock exists for people who want those arrangements to be explicit, reversible and boringly deterministic.
-
Q
Is this bannable?
We can't answer for Roblox's ToS and we won't pretend to. Lurelock is a files-and-launch tool: it does not read or write game memory, does not inject code, and does not automate play. Everything it touches is below the game process line. What Roblox considers a violation of its terms is a question only they can answer; read their terms, then decide. The project's full boundaries are in the docs.
-
Q
Does Lurelock send data anywhere?
No telemetry, no analytics, no update pinging, no network at all by default. The only time Lurelock talks to the network is if you enable rich presence — and that talks to Discord, not to us.
-
Q
What do the flag ratings mean?
supported flags are ones the project maintains and tests against current clients. placebo proven to do nothing but harmless to keep. rejected are known harmful or breaking. community are shared by other players, unvetted. tweaks are harmless cosmetic or feel changes. The full table is in the flag reference.
-
Q
I broke something. How do I undo?
The manager keeps a manifest and an undo ledger. From the deck, hit undo session after a run, or restore clean client to strip every stamp Lurelock ever made. If you removed Lurelock already: delete the client's FastFlags folder and re-install from the store — flags are the only thing a wipe can't fully restore on its own.
-
Q
Why is it not open source?
The source is public so it can be audited and built by anyone — but it ships under all-rights-reserved. We want you to be able to read and verify exactly what runs, without inviting wholesale forks that repackage the same code under different names. The license note is in the legal page and at the bottom of every docs page.
-
Q
It says "unknown publisher".
Code signing costs money and this project deliberately spends zero on it. Compare the SHA-256 from the release notes, run on a test account if you're nervous, and read the build-from-source page if you want to compile the identical thing yourself.
-
Q
Can a mod break my client?
Yes, and it's the honest answer. Any replacement of client content can be incompatible. That's why every mod is togglable, why the manifest tracks original bytes, and why "restore clean client" exists. Treat mods like tackle: check them before you trust them with the whole reel.