The Discord server security checklist (2026)
A secure Discord server has a short list of people with dangerous permissions, 2FA required for moderators, only trusted bots, an antinuke bot at the top of the role list, antiraid and automod turned on, and logs for every moderation action.
Roles and permissions
- List who has Administrator, Ban, Kick, Manage Server, Manage Roles, Manage Channels and Manage Webhooks - remove it from anyone who doesn't use it.
- Never give Administrator to a role many people share.
- Keep the antinuke whitelist and admin list to people you'd trust with the whole server.
Accounts
- Require 2FA for moderation (Server Settings > Safety Setup).
- Tell staff never to scan QR codes or log in through links sent in DMs.
Bots
- Fewer bots, fewer risks - an all-in-one bot replaces several.
- Turn on bot-add protection:
?antinuke botadd on. - Give each bot only the permissions it needs; only the security bot needs to be above everyone.
Automatic protection
Questions
What's the single most important security step?
Keep dangerous permissions to as few people as possible and put an antinuke bot above them - most server disasters come from an account that had too much power.
Protect your server with Rage - free.
Add to Discord