We are announcing the upcoming deprecation of the xbl: (Xbox Live) and live: (Microsoft PUID) identifier types currently permitted in FiveM servers via the GetPlayerIdentifiersnative.
On April 27, 2026, the xbl and live identifiers will be removed from the identifier list, as part of our ongoing efforts to improve platform integrity and protect our players’ privacy.
This change is not expected to affect the majority of servers. We still encourage you to review your resources to confirm nothing relies on these identifiers.
Thank you and please stay tuned for more platform updates.
Removing this information is certainly good for the players, but for us founders, it removes an additional security measure against cheaters using SPPof escaping bans. Removing a lot of information is fine, but we must also ensure the security of the founders of their servers.
how about providing a hashed xbl and live id to protect the players privacy without damaging the server owner’s ability to limit cheaters ability to spoof bans
that way everyone is happy because this change will affect alot of servers unlike what the post is saying
How would the value return after the depreciation is in affect and those that don’t remove the two identifiers?
Depending on how it returns, this could presumably create a mass ban domino affect in every Anti-Cheat, Admin Menu, etc. ← To anyone that doesn’t update this. And also, only a 2 week notice?
Yes, make it easier for people to circumvent bans and spoof. That sounds like a genius idea, especially considering the lua scheduler has had an injection vulnerability for YEARS.
Maybe I’m missing the point here, but how does this exactly do anything for “privacy”? You can get far more information out of steam or discord identifiers. Might as well remove those too
Hi Just to stay on topic, a better solution is now available if you want to ensure compliance (cfx.re / fivem) you can implement HMAC-256 hashing with an additional factor using the TLS certificate generated by the server (Botan::X509 for TCP as example) so no reverse.
Every anticheat should handle this for the ones claiming mass bans and whatsoever, xbl identifiers are in a lot of servers not required and are unnecessary imo, expecting discord identifier and having strict access to your discord server is even better than an xbl identifier
Just to stay on topic, a better solution is now available if you want to ensure compliance (