FORKED : BL3 Auto SHiFT

Cross platform Go app for automatically redeeming SHiFT codes for all Borderlands and Wonderlands games, including Borderlands 4.

This was forked from matt1484's repo as it appears to be no longer maintained. Since VIP is discontinued, all VIP code has been removed. This will only redeem SHiFT codes going forward.

Authentication uses the Gearbox SHiFT website (shift.gearboxsoftware.com) directly, following the login + redemption flow (the old api.2k.com Borderlands API is gone).

Getting Started

1. Make a SHiFT account at Borderlands
2. Download program from above link
3. Unzip the folder
4. Run it, you will be prompted for username and password
5. Enter username and password (we only use this info to sign into borderlands)
6. Watch it do its magic
7. Repeat when more codes come out (or set up a cron job)

Run it with --help to view command line args that are supported.

Command line flags

Flag	Description
-e, --email	SHiFT account email (prompted if omitted)
-p, --password	SHiFT account password (prompted if omitted)
--shift-code <code>	Redeem a single SHiFT code instead of the full list
--allow-inactive	Attempt to redeem inactive SHiFT codes too
--v1	Force the original orcicorn code source
--v2	Force the newer ugoogalizer/mentalmars code source
--platform <list>	Comma-separated services to redeem on (steam,epic,psn,xboxlive,nintendo,stadia); default: all offered
--game <list>	Only redeem these games (case-insensitive substring, e.g. "borderlands 3,wonderlands"); default: all
--skip-game <list>	Skip these games (case-insensitive substring, e.g. "borderlands 4")
--config <path>	Use a local config.json instead of the published remote config
--dryrun	Discover and match codes but do not redeem (no side effects)
--rampup	Cautious mode for a first run or after a long gap: paces requests, backs off after 5 consecutive non-200 responses, and stops cleanly after 20 (likely rate-limit/shadowban)
--count <n>	Stop and save after n successful redemptions (0 = no limit)
--refresh	Re-query codes already redeemed on every linked platform (run after linking a new platform on your SHiFT account)
--migrate	Upgrade the redeemed-codes cache file in place to the current version and exit (no login; -e selects the per-account cache)
-v, --verbose	Verbose step-level logging to stderr

First run, or first in a while? SHiFT readily rate-limits a large redemption (it answers with 302s once it's throttling you). Run with --rampup the first time, or after months away, to pace requests and stop cleanly instead of getting shadowbanned. bl3auto reminds you when it looks like a first or long-overdue run.

On bulk runs the request pacing is adaptive: it automatically slows down when SHiFT starts throttling (302s) and speeds back up after a clean streak, so it settles on the fastest rate SHiFT tolerates without you having to tune anything. -v shows the interval adjusting in real time.

Platforms

bl3auto redeems each code on every platform linked to your SHiFT account — the site returns one redemption form per linked service, so a "universal" code is redeemed once per linked platform (e.g. Steam and Epic). To cover more platforms (PSN, Xbox, Nintendo, Stadia), link them once at shift.gearboxsoftware.com and bl3auto will pick them up automatically. Use --platform to narrow redemption to a subset of services. Before a bulk run, bl3auto prints the platforms your account can redeem on (from the cache) so you can confirm your account is linked as you expect.

Skipping games you don't want

SHiFT redemption isn't gated by game ownership — a code for a game you don't own still redeems and the reward waits until you play. If you'd rather not spend requests on a game (e.g. one you haven't bought yet), use --skip-game "borderlands 4" or restrict with --game "borderlands 3,wonderlands". Unlike --platform, the game filter drops codes before they're queried, so it's the one filter that actually reduces request volume. It's per-run (not remembered); --refresh ignores it for a full re-scan.

Code sources

bl3auto reads SHiFT codes from two sources and, by default, uses the newer (v2) source and falls back to the original (v1) source only if v2 is unavailable:

• v2 (default) — ugoogalizer/autoshift-codes (shiftcodes.json, includes Borderlands 4)
• v1 — jauderho/shift-codes (orcicorn index.json)

Use --v1 or --v2 to force a single source.

Redeemed-codes cache

bl3auto remembers what it has already redeemed (and which codes are expired) in a per-account JSON file so it doesn't reattempt them. Progress is crash-safe: pressing Ctrl-C stops the run cleanly with what's been redeemed saved, and the cache is also checkpointed periodically during a run, so an interruption never forces you to re-query everything (which would only trip SHiFT's rate limit faster). Codes redeemed on every linked platform — and expired codes — are skipped without even a query on later runs to cut request volume; if you link a new platform on your SHiFT account, run with --refresh once so those codes are re-checked. If a codes/ directory exists in the working directory, that file is stored there — the same path the Docker image mounts its volume onto — so a native run from the project directory shares the cache with Docker. Otherwise it falls back to the per-user OS config directory (e.g. ~/Library/Application Support/bl3auto/bl3auto on macOS, ~/.config/bl3auto/bl3auto on Linux). Run mkdir codes before running natively if you want the cache kept alongside the project. Use --migrate to upgrade an existing cache file to the current format.

Installing

Docker

Source: https://hub.docker.com/r/jauderho/bl3auto/

1. Install Docker
2. Run docker pull jauderho/bl3auto:latest
3. Optional: Create codes subdirectory to store output from previous runs with mkdir codes
4. Run docker run -it -v codes:/root/.config/bl3auto/bl3auto jauderho/bl3auto:latest
   • The mounted volume will keep track of existing codes that have been used already

Docker Compose (preferred)

1. Install Docker and docker-compose
2. Create .env and put the following in the file
   • Add BL3_EMAIL="me@myemail.com" and BL3_PASSWORD="mypassword"
   • Replace "me@myemail.com" with your login email address
   • Replace "mypassword" with your login password
3. Use the compose.yml file below (Updated as of 10/16/2021)

services:
  bl3auto:
    container_name: bl3auto
    image: jauderho/bl3auto:latest
    command: ["-e", "${BL3_EMAIL}", "-p", "${BL3_PASSWORD}"]
    volumes:
      - './codes:/root/.config/bl3auto/bl3auto'

volumes:
  codes:

4. Optional: Create codes subdirectory to store output from previous runs with mkdir codes
   • Doing so will allow bl3auto to compare and avoid trying to redeem a previously used code
5. Run docker-compose up

Using the prebuilt releases

The binaries/executables are released here

FAQs

Why does my operating system say it's an unrecognized/untrusted app?

Telling the operating system that we're a trusted source is expensive. This is a small open source project and we don't have the funds to correctly sign the app.

Running the app on macOS

macOS may refuse to run the app because it is "from an unidentified developer". To get around this, right click on the app in Finder, and while holding the ⌥ Option key, click Open in the menu. You will be prompted with a message similar to this:

macOS cannot verify the developer of "bl3auto". Are you sure you want to open it?

Click the Open button and the app will run in your terminal. From that point forward you will be able to run the app directly or from your terminal without any issues.

Why does my antivirus flag this program?

It's a false positive. If you don't trust us, you can look at the code and compile it yourself. That's one of the beauties of an open source project!

It's not working. What should I do?

File an issue here with as much detail as you can provide. We're working on adding additional logging and a bug template to better assist with any issues.

License

This project is licensed under the Apache-2.0 License - see the LICENSE file for details