Keep your server private and safe

What should I do to keep my server secure?

Use a whitelist for private servers, keep online-mode on, give only needed permissions, and back up regularly.

Before you start: Nothing.

Step by step

1. For a private server, turn on the whitelist.
2. Keep online-mode=true unless you run a proxy that forwards accounts.
3. Use LuckPerms ranks instead of giving op.
4. Only install plugins from official pages (Modrinth, Hangar, SpigotMC, the author's GitHub).
5. Use panel sub-users with limited permissions instead of sharing your account.
6. Turn on two-factor sign-in for your CoreX account.
7. Set a daily backup schedule so any damage can be undone.

Check it worked: Only the people you intend can join or manage the server.

Why it happens: Most problems come from too much access or unsafe plugins.

More guides on Security, abuse, and compromised accounts:

• Your account was hacked or you got a sign-in alert
• Phishing: emails or messages pretending to be CoreX
• Griefers, force-op and malicious plugins
• Players using hacked clients
• Report abuse from a CoreX server