Nitrado Account Security: Protect Your Account and Server

Running your own game server should be about building a great multiplayer experience, not stressing over account issues or lost progress. There are a few ways that malicious people can target your account and server. Due to that, we’ve created this guide to help you protect your account, recognize threats, and what to do if you’re compromised. Following this will keep your Nitrado server online and secure 👏

Protect Your Account

Preventing major security breaches requires you to take precautions and maintain a strong account. Our Nitrado experts suggest the following:

• Strong Passwords: Create a unique password using at least 12 characters, combining uppercase and lowercase letters, numbers, and symbols. Avoid repeating characters, common phrases, or reusing passwords across multiple sites. A password manager is strongly recommended.
• Enable Two Factor Authentication (2FA): 2FA adds a critical second layer of security, requiring a unique authenticator code even if someone obtains your password.
• Never Share Credentials: Keep your main account password and master FTP credentials strictly private.
• Use Guest Access Rights: If anyone needs admin privileges, grant them access via the User Management panel. This lets you assign limited permissions without revealing your credentials. (Note: Guest access is not available for console servers).
• Nitrado Password Policy: Nitrado staff will never ask for your password under any circumstances.
• Email Security: Ensure the primary email address linked to your account is secure, as access to your email controls account recovery options.

Recognize Scams and Threats

In some cases, attackers may use social engineering tactics rather than direct technical attacks. Spotting these early on can neutralize them and keep you safe.

• Phishing Links: Fake emails or website links designed to look like Nitrado are meant to steal credentials. Always confirm your browser is on the official nitrado.net domain before typing in login details.
• Fake Support Agents: Impostors on Discord, forums, or in game may claim to be Nitrado staff demanding money or credentials. Official support is only handled through the Nitrado ticket & chat system. Nitrado employees will never join your server demanding payment.
• Empty Threats: In game threats like “I have your IP,” “I am going to hack your server,” or false claims of legal action are almost always empty scare tactics from frustrated players. Ignore the intimidation, ban the user, and continue playing.

What to Do If Your Account Is Compromised

If you suspect someone has unauthorized access to your account or strange server behavior, take these immediate steps:

1. Stop the Server: Shut down the server through your Web Interface right away to prevent further file or world modification.
2. Change All Passwords: Change your primary Nitrado account password immediately. Next, update your FTP passwords and any in game or RCON admin passwords.
3. Secure Your Email: Verify that your registered account email has not been changed, and update your email account password.
4. Audit Access Lists: Check your Guest Access Rights panel to revoke unknown users, and clear any unauthorized entries from your server in game admin and whitelists.
5. Contact Support: Submit a ticket to Nitrado Support immediately to ensure all active sessions are logged out and to request server restoration from an automatic backup.

DDoS Attacks and Protection

A Distributed Denial of Service (DDoS) attack occurs when multiple external systems flood a network with junk traffic to overload the server and cause downtime or lag.

• Built In Defense: Nitrado servers are protected by enterprise hardware level DDoS mitigation. Our systems automatically detect and filter malicious traffic in real time without requiring manual configuration or third party software.
• Prohibited Testing: Launching a DDoS attack against any server, including testing an attack on your own rented server, is illegal and violates Nitrado Terms of Service. Because servers share physical host hardware, attacking your server degrades service for other users on the network.

 
Taking a few proactive steps today saves you from massive security headaches, lost world files, and downtime tomorrow. By using a strong password alongside two factor authentication, sharing permissions exclusively through guest access rights, and relying on our built in DDoS protection, you can focus on hosting your community with complete confidence. Here are two extra resources that you can review:

• How to Manage Guest Access Rights
• Changing your Nitrado Account Password