Security tips
Ten steps to a server that is hard to break.
Go through them in order. Each one takes a few minutes and closes a real hole.
- 01
Give Administrator to as few people as possible.
A hacked admin account can delete everything. Give moderators the exact permissions they need instead.
In Discord's settings - 02
Require 2FA for moderators.
In Server Settings, under Safety Setup, turn on the 2FA requirement for moderator actions. A stolen password alone is then not enough.
In Discord's settings - 03
Place ZeroBot's role high.
ZeroBot can only act on members and roles below its own role. Drag it above your staff roles.
In Discord's settings - 04
Switch on Anti-Nuke.
Set limits for deleting channels, deleting roles and banning. Anyone who goes past them is quarantined at once.
- 05
Get ready for raids.
Turn on raid mode and verification, so a wave of new accounts is stopped at the door.
- 06
Block scam links.
Auto moderation removes invite and scam links, and Lookalike Links catches fake Discord and Steam pages.
- 07
Approve every new bot.
With Bot Approval, a bot someone adds waits without its permissions until the owner allows it.
- 08
Keep an eye on staff actions.
Logging records every ban, role and channel change. Staff Watch flags actions that are unusual for that person.
- 09
Keep a way back.
Server Backups restore deleted channels and roles, and Time Machine undoes changes.
- 10
Run a fire drill.
Fire Drill rehearses a raid or a nuke against your settings and shows what would get through.
See where your server stands.
The Security Center grades your setup and links a fix for every gap.