How to keep your Minehut server secure

[fallow heath]

How to avoid being hacked

• Never give out your panel password: Your server's console is the most powerful entity on your server, it cannot be banned, and can run any command on the server (provided a plugin doesn't explicitly restrict it), so if your Minehut Panel password is ever compromised, it's like giving someone the keys to your house, and making it so you cannot stop them from stealing whatever they want. Do not give out your password and use a unique and strong password on your Minehut account.

• Only install legitimate plugins: The most common way a server is hacked is via the use of backdoored plugins. A backdoor is a programming term for a program that gives a hacker access to your server's console and files. For example. A backdoored plugin is typically advertised as "Cracked" or "Nulled", they are typically found on websites such as BlackSpigot.

Under NO circumstances should you download plugins from any website like this. Only download highly rated plugins from https://spigotmc.org, https://modrinth.com/plugins or https://dev.bukkit.org/bukkit-plugins. If you think a plugin is suspicious, decompile the plugin and look for suspicious code, or ask someone who knows how to code to have a look for you, better safe than sorry.

• Only give permissions needed: Only give each rank on your server the permissions they need, Moderators do not need /op to moderate, use a plugin like LuckPerms to assign appropriate permissions to each rank.

• Use Common sense: As the oldest rule in the book says, if it seems too good to be true, it probably is.

By using this guide, you should minimise your server from being hacked, for further reading, see https://www.fbi.gov/how-we-can-help-you/safety-resources/scams-and-safety/on-the-internet.

[grim ember]

(this is a friendly reminder for anyone else viewing this post, don't reply if you can avoid it, because the OG message should be seen immediately when you open the post)