Skip to main content

What is the OPGuard plugin?

OPGuard is a security plugin designed to protect Minecraft servers from operator (OP) access abuse. This plugin helps prevent attacks such as:

  • OP hijacking (taking over OP access)
  • Command injection
  • Illegal OP granting
  • Permission exploitation With proper configuration, OPGuard can become your server's main line of defense.

Installation

1. Make sure the OPGuard plugin is already installed on the server

To make sure, run the following command in the console

opguard

2. Set the OpGuard password

To access Operator, a password is required to become an Operator, so to set the password do as follows

opguard password <password>

Run the command in the console to create a password,
If successful, the log "OpGuard (Okay)" will show up in the console

3. Using OpGuard

The way to make a Server Operator with the password you've created is with the command:

opguard op <playerName> <password>

Example

opguard op admin1 abcdf123

Tips

  • Use a strong password (uppercase, lowercase, numbers, symbols).
  • Don't use the same password as your Mojang/Microsoft account.
  • Change the password periodically.
  • Restrict access to the server console to trusted admins only.
  • Integrate notifications to Discord/Telegram if available.