Every Minecraft server admin learns the hard way: if you don't protect against grief, you'll spend more time fixing damage than actually playing. Install these plugins before you open your server to anyone.
The Core Three
1. CoreProtect
CoreProtect logs every block placement, break, container access, and entity interaction on your server. When someone griefs a build, you can see exactly who did it and roll back the damage.
Essential commands:
/co inspect- Click any block to see its history/co rollback u:PlayerName t:1h- Undo everything a player did in the last hour/co rollback r:20 t:1d- Roll back all changes within 20 blocks in the last day
Configure it to log containers (chests, barrels, furnaces) and entity kills. A griefer who empties all your chests is just as destructive as one who TNTs your base.
2. GriefPrevention
GriefPrevention gives players land claims using a golden shovel. Claimed areas can only be modified by the owner and players they trust.
Players earn claim blocks over time (default: 100 blocks per hour of playtime). This naturally rewards active players with more protection.
| Server Size | Starting Claim Blocks | Blocks Per Hour | Max Accrued | |------------|----------------------|-----------------|-------------| | Small SMP | 100 | 100 | 5,000 | | Medium Server | 200 | 150 | 10,000 | | Large Public | 500 | 200 | 50,000 |
3. WorldGuard + WorldEdit
WorldGuard lets admins protect entire regions. Use it for:
- Spawn protection (no building, no PvP)
- Event arenas with custom rules
- Admin areas that players can't enter
Anti-Cheat
Vulcan or Matrix
Choose one anti-cheat, not both. Vulcan is the current gold standard for Paper servers. It catches:
- Flight hacks
- Speed hacks
- Reach/hitbox modification
- Inventory manipulation
- Timer cheats
Configure it to alert staff first, then auto-kick after multiple violations. False positives do happen, and auto-banning innocent players kills your community faster than griefers do.
Container and Anti-Theft Protection
LWC Extended
Locks chests, doors, furnaces, and other containers automatically. Players can add trusted players with /lwc modify commands.
Even with GriefPrevention claims, LWC adds a second layer. If someone gets trusted in a claim, they still can't access locked containers.
Fire, Water, and TNT
Disable fire spread, TNT, and lava placement for non-staff by default. These are the most destructive grief tools available.
In Paper's paper-world-defaults.yml:
environment:
disable-explosion-knockback: false
fire-tick-delay: 30
Use WorldGuard flags for spawn and public areas:
/rg flag __global__ tnt deny
/rg flag __global__ fire-spread deny
/rg flag __global__ lava-flow deny
Backup Strategy
No protection is perfect. Always have backups as your last line of defense.
- Automatic daily backups (minimum)
- Pre-event manual backups
- Test restore from backup monthly
On Space-Node hosting, automatic backups are included with every plan. One-click restore means you can undo even catastrophic damage in minutes.
The First 24 Hours Checklist
Before opening your server:
- Install CoreProtect, GriefPrevention, and WorldGuard
- Set up spawn protection (50-100 block radius)
- Disable global fire spread, TNT, and lava flow
- Configure your anti-cheat in alert-only mode
- Create a test area and verify all protections work
- Set up automatic backups
- Document rules clearly at spawn and on your website
Taking an hour to set up proper protection on day one saves you hundreds of hours of cleanup later.
