Secure Boot
Secure Boot is a UEFI firmware setting that checks the digital signature of each boot loader and driver before Windows loads. Code that is unsigned, or signed with a key your firmware does not trust, gets blocked at startup. You switch it on or off in your BIOS menu, not inside Windows.
It comes up in spoofing questions because it sits in the firmware layer, the same layer that holds your SMBIOS tables. A permanent spoofer writes to firmware. A session spoofer does not. Do not guess at the setting. Follow the setup guide for your product, and ask support before you change it.
Secure Boot is not something you interact with while playing. It is a switch in your BIOS or UEFI menu, and it either allows or blocks unsigned code at boot. It matters to cheat buyers because HWID spoofers come in two shapes, and only one of them touches firmware at all.
Session spoofers stay above the firmware
TRACE 2.0 is a session spoofer by design. You run it once per session, after injecting your cheat, not before. It spoofs drives, RAM, monitors, network adapters, GPU and motherboard identifiers. Nothing is written to firmware, so a reboot returns your real hardware. A seed system lets you keep the same fake identity across sessions. That matters, because an anti-cheat that sees a new PC every day is more suspicious than one that sees the same PC every day. TRACE 2.0 covers Easy Anti-Cheat and BattlEye titles. It does not cover Ricochet or Vanguard. It is the best value option and the safe first purchase if you have never spoofed before.
Permanent spoofers write to firmware
Verse is a permanent spoofer that works below Windows. It rewrites SMBIOS, UEFI variables, the TPM identity, EFUSE MAC and more. Spoof once and the identity survives every restart. Its SMBIOS fixer picks from over 1,250 real motherboard profiles, so the spoofed board is one that actually exists rather than a random string a kernel anti-cheat can flag. It covers Vanguard and Ricochet in addition to Easy Anti-Cheat and BattlEye. ASUS, MSI, Gigabyte and ASRock boards are covered. Lenovo, Acer and Dell prebuilts currently are not. Verse sells in limited batches and is often out of stock, so use the restock alert on the product page.
Before and after you spoof
The published prep steps are the same for both products. Turn off Memory Integrity under Core Isolation, and disable Windows Defender. The setup guides walk through every toggle, so work from your guide rather than from memory. Secure Boot is not one of those two prep steps, so do not change it on a hunch. Ask support first if a guide or a game raises the question. After a Verse spoof, reboot fully rather than using sleep or fast startup, so the game reads the new firmware values.
A spoofer does not unban the old account and does not remove the ban record. It gives a clean account a clean machine. For live coverage on any product, read the board at /status rather than trusting a claim in an article. You can compare both options on /games/hwid-spoofers.
