With Denuvo Completely Defeated, 2K Turns To Annoying Online Check In Requirement

from the bad-to-worse dept

Ah, Denuvo. It’s been several years since we checked in on this once vaunted DRM tool that billed itself as undefeatable. The end of PC gaming piracy was said to be at hand, at least for any title using Denuvo. Then, predictably, the cracking community saw the target the company had put on its own tool and got to work. They were first able to crack games using Denuvo in months, which turned into weeks, which turned into days, which eventually turned into it being cracked essentially on a game’s launch day.

So, how’s it been going for Denuvo since? Well, it’s essentially been rendered completely useless at this point.

As recently reported by Tom’s Hardware, on April 27, a large Reddit thread tracking which games using Denvuo DRM still needed to be cracked or bypassed officially hit zero. (This list tracks games that don’t require an online server connection, not MMORPGs and other games that do.)  What that means, effectively, is that according to Denuvo modders and hackers, the DRM tech is no longer able to stop pirates from downloading and installing games for free. This milestone for hackers is largely thanks to the MKDev collective and modder DenuvOwO. It was these people who created the hypervisor-based bypass (HVB) that installs a kernel-level driver to bypass Denuvo’s DRM checks.

Technically, Denuvo is still in the game, but it isn’t functioning as it should, and pirates can play without paying. And there is already some evidence that bypassing Denuvo has led to performance improvements in titles like Resident Evil Requiem, which might push some people to use the bypass even if they bought the game legally. We saw this in a previous Resident Evil game when hackers bypassed Denuvo in 2021.

This is always the life cycle of DRM in video games. Whatever audacious claims a DRM company might want to make early on with its product, the technology is eventually defeated to one degree or another and all that is left are the byproducts of the DRM that serve to do nothing other than annoy legitimate customers of a video game. If the technology is so intrusively bad that even legit buyers of a game want to crack it out of their games, and the pirates are completely unencumbered by it as well, then it’s a wonder why anyone would bother including it in their games to begin with.

DRM is pretty much always bad. The desire to protect a game from pirates is understandable, but ultimately pointless. There is almost never enough benefit in terms of generating more sales by trying to fight piracy to be worth pissing off your actual paying customers. And tactics such as what publisher 2K has decided to do in the wake of Denuvo’s complete failure aren’t any better.

2K Games has apparently begun adding 14-day online check-ins to some of its PC games. The check-in has apparently been added to NBA 2K25, NBA 2K26, and Marvel’s Midnight Suns. These games now reportedly use a “fixed offline authorization token” that expires after two weeks. Once that happens, the game will not be playable until you connect to the internet and let the game ping Denvuo to get a new token. Pirat Nation and hackers are claiming this new countdown isn’t properly disclosed on the games’ Steam Store page or in each title’s respective EULA.

I’ll just add that pushing this new requirement out via an update to existing purchases is also a problem. Customers bought these games with the understanding of how they would work or not when offline. 2K suddenly changing the product in a meaningful way after it had already been purchased is a flatly anti-consumer move.

And I have no doubt that this online check requirement will be defeated by the same folks who defeated Denuvo. This arms race continues, but it shouldn’t. Why not focus on making great games and connecting with your paying customers to give them reasons to actually pay instead?

Filed Under: check ins, denuvo, drm, video games

Companies: 2k, denuvo