Oct 6, 2026 · News desk · Account security
DonutSMP account security (Oct 6, 2026): lock down Minecraft and Discord before you trade
Updated October 6, 2026. No big DonutSMP update landed overnight, so today's piece covers something that saves more bases than any farm guide: keeping your Minecraft and Discord accounts safe. If someone gets into your account, every spawner, elytra and stack of money on it is gone in minutes, and the public wiki is clear that recovery or reimbursement is never guaranteed.
Everything below is based on the public Account Security Guide, Scam Reporting Guide and Community Service Safety pages on the community wiki.
The 6 basics (do these today)
- Use a unique password for your Microsoft account, your email and Discord. Reused passwords are the number one way accounts get taken.
- Turn on two-factor authentication (2FA) everywhere it is offered, starting with the email that owns your Minecraft account.
- Keep recovery codes offline and private. A screenshot in your Discord DMs is not “offline.”
- Never share login codes, session files or tokens. Not with friends, not with “helpers,” not with anyone claiming to be staff.
- Check active sessions after you log in on a friend’s PC or a school computer, and sign out of anything you don’t recognize.
- Keep your launcher, browser and OS updated. Old clients and random “free” mod packs are a common way malware gets in.
Staff will never ask for your password
The wiki states it plainly: DonutSMP staff do not need your password or authentication code to investigate a server issue. If someone in DMs says they are staff and needs your code to “verify” you, “unban” you or “give you a rank,” that is a scam. Full stop.
Linking codes are a separate, official flow. The account linking note (Sep 22) covers /link and why you still should not screenshare a code.
Red flags in DMs and links
- “Free rank,” “free Donut+,” or “free money” offers from accounts you don’t know.
- Shortened links (bit.ly and similar) that hide where they go.
- Look-alike store or support sites. Open the official store and the support portal only from addresses you have checked yourself, then bookmark them.
- Pressure to act fast (“offer ends in 5 minutes,” “your account will be banned unless…”).
- Downloads described as a “client,” “texture pack” or “FPS boost” sent by a stranger.
When in doubt, don't click. Type the address yourself.
If your account may be compromised
Move fast and in this order:
- Change the password on the affected account.
- Sign out every session you don’t recognize.
- Secure the linked email (new password and 2FA), because whoever controls the email controls recovery.
- Save evidence: screenshots, messages, usernames, dates and times.
- Use the official recovery channel for that platform (Microsoft for Minecraft, Discord for Discord).
- For a DonutSMP-specific problem, open a ticket through the DonutSMP Support Portal at support.donutsmp.net.
The portal address is support.donutsmp.net. How tickets and /link codes work there is the support portal note (Sep 30).
Got scammed in a trade? Report it the clean way
The public Scam Reporting Guide recommends:
- Stop any further transfers right away.
- Write down the exact username of the other player.
- Keep original screenshots and recordings, plus the date, time, item, quantity and what was agreed.
- Tell it in order, and separate what you saw from what you guessed.
- Report through official channels only. Don’t retaliate or post public call-outs; they can backfire and slow a review.
A report does not guarantee you get items back, so prevention (the checklist above, plus our trading checklist) is still your best defense. Base visits have their own traps: the TPA traps note (Sep 19) is the public-wiki version of not teleporting into a setup you have not checked.
If a scam already wiped your balance and you need to restock, our shop delivers DonutSMP money fast.
Sources
- donutsmp.wiki/account-security-guide
- donutsmp.wiki/scam-reporting-guide
- donutsmp.wiki/community-service-safety
Related reading
Quick FAQ
No. The wiki says staff do not need your password or authentication code.
Treat any unexpected rank or money offer as suspicious until you’ve confirmed it on an official, verified page.
Change your password, sign out all sessions, save evidence and contact support. And don’t share your login again, even with friends.
DonutSMP Exchange is an independent storefront. We are not affiliated with Mojang Studios, Microsoft, or the DonutSMP server. We do not claim that buying here complies with DonutSMP rules or that real-money trading is allowed. You decide whether to buy. We handle payment, delivery, and support.