安全与防护

保护好你的服务器和账号：DDoS 防护是怎么工作的、用白名单和权限挡住破坏者、强密码，以及被入侵之后怎么恢复。

• Give staff the least access they need

  Hand every helper the smallest set of permissions that lets them do their actual job, keep panel access and in-game rank separate, and take access back the day someone stops helping.

  阅读约 6 分钟 · staff, permissions, sub-users · 更新于 2026年10月21日

• Where to get plugins and mods safely

  Plugins and mods run as code on your server with full access to your files, so the single most important security habit is downloading them only from the sites the developers actually publish on.

  阅读约 6 分钟 · plugins, mods, downloads · 更新于 2026年10月21日

• Turn on two-step login for your GuavaHost account

  Two-step login adds a six-digit code from your phone to every GuavaHost sign-in, so a leaked password on its own is no longer enough to open your panel, your files or your backups.

  阅读约 6 分钟 · account, two-factor, 2fa · 更新于 2026年10月21日

• Keep your server IP and your own details private

  A hosted server's IP address belongs to a data centre, not to you, so it gives away far less than people assume, and the things actually worth protecting are your account, your home connection and what you tell people in chat.

  阅读约 5 分钟 · ip address, privacy, ddos · 更新于 2026年10月21日

• Can't log in? Reset your password and other fixes

  Reset a forgotten GuavaHost password, fix a reset link that expired, and get past lockouts, social sign-in errors and sessions that keep expiring.

  阅读约 4 分钟 · login, password reset, forgot password · 更新于 2026年9月24日

• What to Do If Your Server Was Griefed or Hacked

  If your server was griefed or hacked, do not panic: stop the damage first, restore your world from a backup taken before it happened, then close the hole that let it in so it cannot happen again.

  阅读约 3 分钟 · griefing, recovery, backups · 更新于 2026年9月24日

• Protecting Your Panel Account With a Strong Password

  Your GuavaHost account controls every file, backup, and setting on your server, so protecting it with a strong, unique password and careful login habits is the single most important security step you can take.

  阅读约 4 分钟 · account, password, panel · 更新于 2026年9月24日

• Sign in with Google, Discord or GitHub

  Use Google, Discord or GitHub to sign in to GuavaHost without a password, connect them to an existing account, and fix the common errors.

  阅读约 4 分钟 · sign in, login, google · 更新于 2026年9月24日

• Keeping Griefers Out: Whitelists, Permissions and Backups

  The three tools that keep griefers out are a whitelist so only approved players can join, a permissions setup so trusted roles get power and everyone else does not, and regular backups so any damage can be undone in minutes.

  阅读约 2 分钟 · griefing, whitelist, permissions · 更新于 2026年9月24日

• How GuavaHost DDoS Protection Works (and What It Does Not Stop)

  Every GuavaHost server includes free, always-on DDoS protection that filters flood attacks aimed at knocking your server offline, but it cannot stop in-game griefing, stolen passwords, or a player who is simply cheating.

  阅读约 2 分钟 · ddos, protection, network · 更新于 2026年10月1日

关于这些指南

有两件完全不同的事都被叫做服务器安全，而它们需要不同的答案。把攻击者挡在网络之外是我们的活，DDoS 那篇讲了这层防护能做什么、又挡不住什么。把破坏者挡在你的世界之外，以及保住你自己的账号，才是这些指南要讲的。

实际的顺序是：先给账号设一个强密码并打开两步登录，然后给服务器加白名单或密码，接着配好权限让你的管理员不会有超出需要的能力，最后做好备份，这样倒霉的一天只是添点麻烦，而不是真的丢东西。另外还有一篇讲世界已经被破坏之后该怎么办。