Hello! I want to add features that requires higher (dangerous) permission to my bot, but I'm afraid his token might be stolen by some weird guys.
I wanted to know if there is ways to store the token securely ?
#best way to secure my bot's token
pine geyser
green groveBOT
- What's your exact discord.js
npm list discord.jsand nodenode -vversion? - Not a discord.js issue? Check out #1081585952654360687.
- Consider reading #how-to-get-help to improve your question!
- Explain what exactly your issue is.
- Post the full error stack trace, not just the top part!
- Show your code!
- Issue solved? Press the button!
lament dawn
use .env files
pine geyser
My bot is running on a VPS and I'm using dotenv to store my token
lament dawn
and dont give anyone access to your vps
pine geyser
only that ?
lament dawn
yes
if you dont give anyone access to your server, no one should be able to steal your token
pine geyser
I guess I have to work on the server access security
I connect with root user and I saw it is not the best option
pine geyser
if you dont give anyone access to your server, no one should be able to steal yo...
and I'm using pm2 to monitor and restart my bot, is it fine ?
lament dawn
yes
wintry barn
I connect with root user and I saw it is not the best option
Yeah this is the first change you should make
pine geyser
Yeah this is the first change you should make
I dont know much about linux, whats the problem witht that?
wintry barn
Well, if you're worried about security you should be securing your root user first
It has complete all powerful access over your VPS
shadow narwhal
Make a separate regular user with only basic permissions