This category is for Realms and dedicated server feedback. Please send support issues to help.mojang.com, as support posts, bugs, and individual server issues will be removed. Remember that when it comes to "adding more servers" or realm restrictions we are constrained by the rules of the various platforms Minecraft is available on. Thanks!

← Realms and Dedicated Servers
3
Follow

[SECURITY] Educate new players on Minecraft Server Security

A lot of Minecraft servers, are run by individuals who do not know much about dedicated server hosting. There exists a lot of server scanners that scan the internet for open Minecraft servers which do not have proper security measures like whitelists, for example, in place. A warning about 3rd party play already exists, but server owners often do not know how to use commands properly and as a result do not know how to whitelist people. Some do not know a whitelist feature exists and their servers often get griefed easily.

A simple toast/notification can show up when a player joins a server that is not whitelisted and the player is /op-ed, which will lead to the players list, where /op-ed players can easily turn on whitelist and add players to the whitelist, or can at the very least, redirect to a Minecraft support page that shows people how to secure their servers and add a whitelist. The toast could be like "This server is not whitelisted! Press L to secure your server" or something similar

This will genuinely help new people, who do not know much about Minecraft and computers in general, prevent being victims to griefers and server scanners

Avatar
Registered User shared this idea

1 Comments

Please sign in to leave a comment.

Date Votes
Sorted by oldest
  • 1
    Registered User commented
    Comment actions Permalink

    I completely agree. Many server owners are unaware that their servers are publicly visible and therefore vulnerable. Groups such as The Fifth Column and MLPI routinely use automated scanners to identify servers running default MOTDs like “A Minecraft Server” and lacking a whitelist.

    With the rollout of the new server management protocol/API in snapshot 25w35a, this is an ideal moment to revisit the default settings. The update exposes additional metadata and management interfaces, and leaving the whitelist disabled by default significantly increases risk. Enabling it by default would align with the new protocol’s direction and meaningfully reduce potential abuse.