Protection

The Protection module checks accounts when someone verifies or joins the server. It helps against alt accounts, ban evasion and bot spam. You find it in the sidebar under Modules > Protection. Only admins can open it.

The checks run at verification. If verification is off on your server, they don't run right now. See Verification.

Turning it on and off

The switch at the top of the page is the check for new and alt accounts. When you turn it on, it starts with Let them in and tell the team. When it is off, Modhelm does not check new members for alt accounts. The VPN check and the pause on bot spam still apply.

On the right the page shows the state: alt account check, what happens automatically, the limit, the channel for warnings, the quarantine role, VPN and proxy and the automatic pause.

New and alt accounts

Under When an account looks suspicious you pick what happens:

• Don't check: everyone can verify as before.
• Let them in and tell the team: the member verifies, and your team gets a message with the reasons.
• Stop the verification: the member can't verify and sees why. Your team gets a message too.

Under What counts as suspicious you set:

• Discord account at least and Roblox account at least this many days old. Use 0 days to skip an age check.
• Roblox account used by someone else: the Roblox account is already linked to another Discord account.
• Linked account is banned: an account of the same person is banned in this server or its games.

Warnings go to the Channel for warnings. Without a channel of its own, they go to your log channel.

Acting automatically

Modhelm can handle suspicious accounts on its own. Each server decides for itself. Under What happens automatically you pick:

• Nothing, just tell the team
• Give the quarantine role: the member stays in the server but only gets the quarantine role instead of the verified role until your team checks them. For this you pick a Quarantine role.
• Kick: the member is removed and can join again with an invite.
• Ban: the member is banned and gets the reason by DM. They send a request with their main account.

Under When you set from which suspicion this applies:

You can also enter an Own value from 1 to 100. Below it your team only gets a message. At most this many automatic bans in 10 minutes guards against raids: after that you only get alerts, and your team gets a warning. With Undo in the message your team takes an automatic action back.

With Ban alt accounts in the game too, Roblox also bans the person's alt accounts when you ban them from a game. This is the default, and it can be changed for each ban.

VPN and proxy

Modhelm detects VPN, proxy, Tor and data center addresses when people verify and send requests on the website. Only the result, a hash of the address and a shortened browser description are stored, never the address itself, and they are deleted after 90 days. The check runs on your behalf: you are the controller for it and we are your processor. When it is on, the confirmation page tells your members beforehand that your server uses it. Under With a VPN or proxy you pick:

• Off: Modhelm doesn't check addresses. This is the default.
• Only flag: the person gets through. Your team sees the hint on alt account warnings.
• Ask for a captcha: the person types a short code first.
• Block: the person sees "Please turn off your VPN or proxy" and can't continue.

Pause on bot spam

When very many attempts come at once, Modhelm pauses verification and warns your team. After that, every member types a code for a while. Pause automatically is on from the start: at 30 attempts in 5 minutes or 10 accounts younger than 7 days, Modhelm pauses for 30 minutes.

Under Change the thresholds you adjust the values: attempts until the pause, time window, new accounts until the pause, when an account counts as new and the length of the pause.

Pausing by hand and event mode

You find this on the Verification page under Pause and rush:

1. Click Pause, write a reason (only your team sees it) and pick an end: No end, 1 hour, 24 hours, 7 days or a date.
2. People who want to verify then read "The verification is paused right now. Please try again later." Your team gets a message in the log channel.
3. Resume verification starts it again.

You can also pause in Discord with /config.

If a rush is wanted, for example because a big streamer shows your server, use event mode: at The rush is wanted (event mode), pick a Length of 1, 6 or 24 hours and click Start event mode. The automatic pause is off then. Captcha and limits per person stay, and the page shows the verification numbers live. Afterwards the protection turns itself back on. End event mode does that earlier.

What players see

• If an account is too new: "Your Discord account is too new" or "Your Roblox account is too new", with the minimum age on this server.
• During a pause: "The verification is paused right now. Please try again later."
• With a VPN and Block: "Please turn off your VPN or proxy and try again."
• With a captcha: "Please solve the captcha first."

Privacy

An automatic ban of alt accounts is an automated decision you are responsible for. Mention it in your rules and privacy notices, check requests quickly and lift wrong bans right away. See Privacy for server operators.