How do I protect my server from griefing, raids, and theft?
Protecting your server from griefing, raids, and theft is all about layering a few defenses so no single failure leaves you exposed. This guide covers the practical layers that keep most servers safe.
The layers that matter
Combine these for strong protection — each one covers a gap the others don't.
- Whitelist trusted players with
whitelist on— the single strongest prevention for private servers. - Add protection plugins: WorldGuard (region protection), GriefPrevention (claims), and CoreProtect (logs and rolls back griefing).
- Be careful with OP/permissions — don't OP everyone; use LuckPerms for scoped ranks.
- Take regular backups so you can restore after damage (download via Files/SFTP while the Backups tab is being upgraded).
Tip: Install CoreProtect before trouble — it can only roll back what it logged, so it needs to be running before an incident to help you afterward.
Frequently asked questions
What's the single best defense for a private server? A whitelist. Only approved players can join, which stops most grief before it starts.
Which plugins should I run? WorldGuard for regions, GriefPrevention for player claims, CoreProtect for logging/rollback, and LuckPerms for controlled permissions.
Do I still need backups if I have protection plugins? Yes. Plugins reduce risk but backups are your fallback for real damage. Keep your own copies via Files/SFTP.