How do I protect my server from griefing, raids, and theft?

Protecting your server from griefing, raids, and theft is all about layering a few defenses so no single failure leaves you exposed. This guide covers the practical layers that keep most servers safe.

The layers that matter

Combine these for strong protection — each one covers a gap the others don't.

1. Whitelist trusted players with whitelist on — the single strongest prevention for private servers.
2. Add protection plugins: WorldGuard (region protection), GriefPrevention (claims), and CoreProtect (logs and rolls back griefing).
3. Be careful with OP/permissions — don't OP everyone; use LuckPerms for scoped ranks.
4. Keep backups so you can restore after damage — your server is backed up automatically twice a day, and Back up now on the Backups page adds a manual one before risky changes.

Tip: Install CoreProtect before trouble — it can only roll back what it logged, so it needs to be running before an incident to help you afterward.

Frequently asked questions

What's the single best defense for a private server? A whitelist. Only approved players can join, which stops most grief before it starts.

Which plugins should I run? WorldGuard for regions, GriefPrevention for player claims, CoreProtect for logging/rollback, and LuckPerms for controlled permissions.

Do I still need backups if I have protection plugins? Yes. Plugins reduce risk but backups are your fallback for real damage. Restore them from your server's Backups page; downloading your own copies via Files/SFTP adds extra protection.