Never give another player your password, sign-in code, recovery code or session token. A promised rank, prize or team invite does not justify sharing them.
Before you start
- Use distinct passwords for accounts that support them.
- Review Microsoft account security and recovery methods through the official site.
- Choose public contact details carefully and keep personal information private.
Follow these steps
Protect the account through official settings
Open Microsoft account security independently rather than through an unsolicited message. Follow its guidance for two-step verification and keep recovery methods current. Store recovery information securely; do not publish it in a server ticket or chat.
Question unexpected verification and prize messages
Check the actual domain and the request, not just a logo or display name. Stop if another person asks you to forward a sign-in code, approve an unexpected account permission or send credentials to prove ownership. HTTPS alone does not make a site legitimate.
Install only what you can verify
Get the game, launcher, pack and mods through the official project or the server’s independently verified instructions. Do not run a file sent by a new teammate because they call it an anti-cheat, voice-chat fix or entry requirement. Ask staff through a known channel first.
Keep public introductions limited
Share an edition, mode, language and play-time preference rather than your address, phone number or school. Public player posts expose the contact you choose. Younger players should involve a parent or guardian and use appropriate account and communication controls.
Respond through the correct channel
Block unwanted contact and preserve relevant evidence without sharing secrets. Report server-rule violations to its staff and use platform report tools for conduct on those platforms. If account access may be compromised, use Microsoft’s official security and recovery routes; a server moderator cannot recover your Microsoft account.
Common mistakes to avoid
Trusting someone because they appear to be staff
Display names and avatars can be copied. Confirm the person through the server’s established channels before following sensitive instructions.
Posting screenshots that contain secrets
Crop or redact codes, email addresses, session tokens and unrelated private conversations before sending evidence.
Common questions
Is every external verification step fake?
No, but requests vary. Verify the service independently, read the exact permissions and never send sign-in or recovery codes to another person. Decline any step you do not understand.
Does a reviewed MineRate listing or player post guarantee safety?
No. Listing checks and post moderation are not identity verification or a guarantee about every interaction, download or purchase.
Can a server owner reset my Microsoft account password?
No. Use Microsoft’s official recovery process. A server account or plugin password is separate; never reuse your Microsoft password for it.
Official references
For the game or plugin described above. Your server’s rules and configuration take precedence for its custom features.