iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Kernel-level anti-cheat gives a game’s security software access to a highly privileged part of Windows. Studios say that access helps detect cheats that can hide from ordinary user-mode programs; players are right to ask when the software runs, what it inspects, and what control they retain. The driver’s privilege alone does not prove that a product is malicious or collecting private files—but it does make the tradeoff worth examining.
Why does anti-cheat need kernel access?
Windows separates applications into privilege levels. Ordinary programs typically run in user mode, while the kernel is the operating system’s most privileged layer. A kernel-mode driver can observe and interact with parts of the system that a user-mode anti-cheat cannot access as directly.
Riot’s Security Team explained in 2020 that a user-mode anti-cheat’s capabilities could be compromised by a cheat running at a higher privilege level. EA makes a similar argument: kernel cheats can be invisible to anti-cheat software confined to user mode. These are the companies’ explanations of their threat models, not proof that every competitive game needs a kernel driver.
Riot’s early-start rationale
Riot’s 2026 explanation focuses on what it calls the “Who Loads First?” problem: a vulnerable driver could load before the game, be used to help a cheat, and then disappear. Riot says Vanguard’s driver starts early to address that possibility. This describes Riot’s design rationale; it does not establish that other studios face precisely the same risk or need the same design.
#1 Best Overall
- Personalize 5 customizable lighting zones with over 16.8M colors to match your setup or game and synchronize backlit lighting effects with other Logitech G devices using Logitech G Hub
- G213 Prodigy is a full-sized keyboard designed for gaming and productivity, with a slim body built for gamers of all levels and durable construction to repel liquids, crumbs, and dirt for easy cleanup
- Each key is tuned to enhance the tactile experience, delivering ultra-quick, responsive feedback while the anti-ghosting gaming matrix is tuned for optimal gaming performance, keeping you in control
- G213 gaming keyboard features dedicated media controls that can play, pause, and mute music and videos instantly; easily adjust the volume or skip to the next song with the touch of a button
- Customize lighting, game mode, and macro programming with Logitech G HUB software and stay comfortable during long gaming sessions thanks to an integrated palm rest and adjustable keyboard feet
When do Vanguard and EA anticheat run?
“Kernel-level” describes privilege, not runtime. These two products illustrate why it is important to check the specific game and current product documentation.
| Question | Riot Vanguard | EA anticheat |
|---|---|---|
| What does the vendor say about privilege? | Riot describes Vanguard as using a kernel-mode driver. [Riot, April 17, 2020] | EA describes EA anticheat as kernel-mode software. [EA anticheat FAQ] |
| When does the software run? | Riot’s 2020 architecture statement says the driver starts at system startup. Riot’s current support article says it is usually on-boot, while eligible systems can use Pre-Check to run it on-demand. [Riot Vanguard on ARM] | EA says its anticheat runs only while a game that includes its protection is running. This is EA’s published statement, not an independent runtime audit. [EA anticheat FAQ] |
| Can users stop or remove it? | Riot says Vanguard can be uninstalled; games that require it will not run without it. Eligible systems may also use Pre-Check. [Riot uninstalling and disabling guide] [Riot Vanguard on ARM] | EA says the software can be manually uninstalled and is automatically removed when all EA games requiring it are removed. Protected games will not have EA anticheat available after removal. [EA anticheat FAQ] |
| What information does the vendor say it handles? | Riot’s 2020 statement says the driver itself does not send computer information. That is a vendor assertion and should not be expanded into a claim that no related Vanguard component processes information. [Riot, April 17, 2020] | EA explains its information practices in its anticheat FAQ. Its description is a vendor statement, not an independent audit. [EA anticheat FAQ] |
What does kernel access mean for privacy and security?
Kernel access is a consequential permission because driver software operates with broad system privileges. That fact justifies scrutiny of the software’s behavior, operation, and controls. It does not, on its own, show that a driver reads all files, abuses its access, or violates privacy.
Rank #2
- Tri-mode Connection Keyboard: AULA F75 Pro wireless mechanical keyboards work with Bluetooth 5.0, 2.4GHz wireless and USB wired connection, can connect up to five devices at the same time, and easily switch by shortcut keys or side button. F75 Pro computer keyboard is suitable for PC, laptops, tablets, mobile phones, PS, XBOX etc, to meet all the needs of users. In addition, the rechargeable keyboard is equipped with a 4000mAh large-capacity battery, which has long-lasting battery life
- Hot-swap Custom Keyboard: This custom mechanical keyboard with hot-swappable base supports 3-pin or 5-pin switches replacement. Even keyboard beginners can easily DIY there own keyboards without soldering issue. F75 Pro gaming keyboards equipped with pre-lubricated stabilizers and LEOBOG reaper switches, bring smooth typing feeling and pleasant creamy mechanical sound, provide fast response for exciting game
- Advanced Structure and PCB Single Key Slotting: This thocky heavy mechanical keyboard features a advanced structure, extended integrated silicone pad, and PCB single key slotting, better optimizes resilience and stability, making the hand feel softer and more elastic. Five layers of filling silencer fills the gap between the PCB, the positioning plate and the shaft,effectively counteracting the cavity noise sound of the shaft hitting the positioning plate, and providing a solid feel
- 16.8 Million RGB Backlit: F75 Pro light up led keyboard features 16.8 million RGB lighting color. With 16 pre-set lighting effects to add a great atmosphere to the game. And supports 10 cool music rhythm lighting effects with driver. Lighting brightness and speed can be adjusted by the knob or the FN + key combination. You can select the single color effect as wish. And you can turn off the backlight if you do not need it
- Professional Gaming Keyboard: No matter the outlook, the construction, or the function, F75 Pro mechanical keyboard is definitely a professional gaming keyboard. This 81-key 75% layout compact keyboard can save more desktop space while retaining the necessary arrow keys for gaming. Additionally, with the multi-function knob, you can easily control the backlight and Media. Keys macro programmable, you can customize the function of single key or key combination function through F75 driver to increase the probability of winning the game and improve the work efficiency. N key rollover, and supports WIN key lock to prevent accidental touches in intense games
A 2024 peer-reviewed ARES conference paper by Christoph Dorner and Lukas Daniel Klausner examined BattlEye, Easy Anti-Cheat, FACEIT Anti-Cheat, and Vanguard. The authors classified two of those four systems—FACEIT Anti-Cheat and Vanguard—as exhibiting “rootkit-like” behavior under the criteria used in their analysis. That is the paper’s finding for its four-system sample, not a population-wide estimate. The classification does not mean those products are malware and does not establish a privacy violation. [Dorner and Klausner, ARES 2024]
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Vendor assurances and independent analysis answer different questions. A company can describe its design and data practices, but that is not the same as a publicly available independent audit whose scope, date, and findings readers can examine. Comparable public independent audit reports for every product discussed here are not established by the sources cited in this article.
Rank #3
- Ip32 water resistant – Prevents accidental damage from liquid spills
- 10-zone RGB illumination – Gorgeous color schemes and reactive effects
- Whisper quiet gaming switches – Nearly silent use for 20 million low friction keypresses
- Premium magnetic wrist rest – Provides full palm support and comfort
- Dedicated multimedia controls – Adjust volume and settings on the fly
Can you turn off or uninstall kernel-level anti-cheat?
For Vanguard, Riot documents both disabling and uninstalling. Riot also says eligible systems may use Pre-Check for on-demand operation. Removing or disabling Vanguard means games that require it will not work until it is available again.
EA says users can uninstall EA anticheat manually; it is also removed automatically when all EA games that require it are uninstalled. A game that requires EA anticheat will not have that protection available after removal. Check the support page for the particular game and current software version before changing its installation.
Rank #4
- 【Ergonomic Design, Enhanced Typing Experience】Improve your typing experience with our computer keyboard featuring an ergonomic 7-degree input angle and a scientifically designed stepped key layout. The integrated wrist rests maintain a natural hand position, reducing hand fatigue. Constructed with durable ABS plastic keycaps and a robust metal base, this keyboard offers superior tactile feedback and long-lasting durability.
- 【15-Zone Rainbow Backlit Keyboard】Customize your PC gaming keyboard with 7 illumination modes and 4 brightness levels. Even in low light, easily identify keys for enhanced typing accuracy and efficiency. Choose from 15 RGB color modes to set the perfect ambiance for your typing adventure. After 30 minutes of inactivity, the keyboard will turn off the backlight and enter sleep mode. Press any key or "Fn+PgDn" to wake up the buttons and backlight.
- 【Whisper Quiet Design】Experience near-silent operation with our whisper-quiet gaming switch, ideal for office environments and gaming setups. The classic volcano switch structure ensures durability and an impressive lifespan of 50 million keystrokes.
- 【IP32 Spill Resistance】Our quiet gaming keyboard is IP32 spill-resistant, featuring 4 drainage holes in the wrist rest to prevent accidents and keep your game uninterrupted. Cleaning is made easy with the removable key cover.
- 【25 Anti-Ghost Keys & 12 Multimedia Keys】Enjoy swift and precise responses during games with the RGB gaming keyboard's anti-ghost keys, allowing 25 keys to function simultaneously. Control play, pause, and skip functions directly with the 12 multimedia keys for a seamless gaming experience. (Please note: Multimedia keys are not compatible with Mac)
Could a game require extra Windows security settings?
Depending on the PC configuration, Riot lists requirements that can include TPM 2.0, Secure Boot, Memory Integrity (HVCI/VBS), and IOMMU. Which settings apply can depend on the system and current Riot requirements. Check the official guidance for the affected game and your existing hardware and Windows configuration before changing settings or considering a hardware purchase. [Riot Vanguard restrictions]
How should you decide whether to accept it?
There is no evidence here that every kernel anti-cheat is either harmless or inherently malicious. Make the decision based on the specific game and the controls and information available for its anti-cheat:
Best Value
- 【65% Compact Design】GEODMAER Wired gaming keyboard compact mini design, save space on the desktop, novel black & silver gray keycap color matching, separate arrow keys, No numpad, both gaming and office, easy to carry size can be easily put into the backpack
- 【Wired Connection】Gaming Keybaord connects via a detachable Type-C cable to provide a stable, constant connection and ultra-low input latency, and the keyboard's 26 keys no-conflict, with FN+Win lockable win keys to prevent accidental touches
- 【Strong Working Life】Wired gaming keyboard has more than 10,000,000+ keystrokes lifespan, each key over UV to prevent fading, has 11 media buttons, 65% small size but fully functional, free up desktop space and increase efficiency
- 【LED Backlit Keyboard】GEODMAER Wired Gaming Keyboard using the new two-color injection molding key caps, characters transparent luminous, in the dark can also clearly see each key, through the light key can be OF/OFF Backlit, FN + light key can switch backlit mode, always bright / breathing mode, FN + ↑ / ↓ adjust the brightness increase / decrease, FN + ← / → adjust the breathing frequency slow / fast
- 【Ergonomics & Mechanical Feel Keyboard】The ergonomically designed keycap height maintains the comfort for long time use, protects the wrist, and the mechanical feeling brought by the imitation mechanical technology when using it, an excellent mechanical feeling that can be enjoyed without the high price, and also a quiet membrane gaming keyboard
- Is the software required for a game you actually want to play?
- Does its driver start with Windows, or does the vendor say it runs only while the protected game is active?
- Can you stop, disable, or uninstall it, and what game access does that cost?
- What does the current vendor privacy notice say about information collection and use?
- Does the game require particular Windows security features on your machine?
- Is an independent audit publicly available with a clear scope, date, and findings?
Those questions make the tradeoff concrete: a studio’s anti-cheat design may address a real technical threat, while a player can still decide that its system access or operating model is not acceptable for their use.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
