Secure Your Server

Whitelist

A whitelist is a list of approved players. When enabled, only people on this list can join your server.

Enable the whitelist

Open SquidServers and select your server.
Go to Settings and scroll down to Security.
Check Whitelist and Enforce Whitelist to enable.

Add players

Run /whitelist add <username> in game or in the console (replace <username> with the player’s name).
You can also add players manually in the whitelist.json file within your server files.

If you disable Online Mode, players can join using any username. This allows griefers to log in as an Admin and steal permissions.

Use a login plugin so players must enter a personal password before they can move or use commands.

Install a Permission Plugin

Use a permission plugin to manage what players can and cannot do (like using /ban or /stop). This ensures that even if someone joins, they have zero power unless you specifically grant it to them.

Protection Plugins

Use protection plugins to lock down specific areas (like your spawn or shops) so they cannot be broken or burned.

Install WorldGuard (PaperMC)

This allows you to create “regions” where you can disable TNT, fire spread, or block breaking.

playit.gg Hostname Verification

SquidServers uses playit.gg for tunneling, which includes hostname verification to stop port scanners.

How it works: Automated bots scan IP addresses looking for open ports. Hostname verification rejects any connection that does not use your specific playit.gg address.
Result: Griefers cannot find or brute force their way into your server by guessing your numerical IP address.