Detect and fight the exploitation of various flaws/bugs in Minecraft!

Features Permissions Commands Configuration Jenkins


NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.


Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or ticket request for cncp.


Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)

Downloads and History of Changes

  • Download officially approved versions on the Files page at BukkitDev.
  • Development builds have been moved over to the Jenkins at EcoCityCraft.
  • Do not download from any other source, do not use jars other people send you.
  • Changes by build number can be examined in the Jenkins changes list.
  • All commits can be seen in the GitHub commit history.
  • Plugin statistics are no longer reported to


Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new ticket or add to an existing ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of marubal21 marubal21 Nov 30, 2015 at 05:27 UTC - 0 likes

    @asofold: Go

    Yay, all is well in the world again... thanks for the quick help.

  • Avatar of Bobcat00 Bobcat00 Nov 29, 2015 at 18:10 UTC - 0 likes

    @asofold: Go

    No, it was the middle of a regular staircase. The log shows 22 consecutive passable violations at the exact same location in 15 minutes. Some violations were only 5 seconds apart.

    EDIT: I can't rule out the possibility the kid had some kind of hacked client that would trigger a violation every 5 seconds when standing still.

    Last edited Nov 29, 2015 by Bobcat00

    Server: - Survival/PVP, 7 Mob Arenas, Creative World
    Web site:

  • Avatar of asofold asofold Nov 29, 2015 at 16:31 UTC - 0 likes

    @Bobcat00: Go

    Likely a false positive. Probably there is no advantage to go through the floor there. Could also be the chunks not actually being loaded, with a long staircase - not sure that's possible with 500 ms ping, i'd assume it's not possible without recent teleportation or extreme speeds.

    Did you check the exact location? Was it on a corner-type-of-staircase?


    Latest beta release (1.8.x, this site) 3.13.0-BETA-sMD5NET-b878
    (Development builds, 1.8.x: Jenkins)

  • Avatar of Bobcat00 Bobcat00 Nov 29, 2015 at 14:53 UTC - 0 likes

    @asofold: Go

    The passable with delta y=0.10 on the staircase was definitely not caused by logging in. I don't trust the player at all. But I was able to confirm that they're on a slow and/or laggy connection with ping times of 500 to 660 msec. (Ping time from my server in New Jersey to Toronto is 36 msec, then it's another 600 msec to Ottawa, which is only 400 km away.)

  • Avatar of asofold asofold Nov 29, 2015 at 14:35 UTC - 0 likes

    @marubal21: Go

    I was suspecting that :). We could not find anything with fences (Blocks changing dynamically will have the potential to pose trouble, e.g. with plugins altering things or pistons, but that is another topic).

  • Avatar of marubal21 marubal21 Nov 29, 2015 at 14:33 UTC - 0 likes

    @asofold: Go

    I'll check out 886, as for fences i think it was a matter of bad placement when i was trying to reproduce the scenario a player described, i had the fences running next to the end portal frame blocks.

  • Avatar of asofold asofold Nov 29, 2015 at 14:29 UTC - 0 likes

    @Bobcat00: Go

    Passable with 0.1 blocks downwards could be login/join (client rendering stuff).

    Stuck inside blocks is a ticket. Considering to re-add a workaround, for which i am not entirely sure why it had been removed in the first place (allowing to be on ground inside walls means allowing spider basically, but the workaround was a slightly different case with the center of the player inside the block).

    Other cases may or may not be false positives (have they been observed to be false positives or are the players 100% trusted?). Some speed cheats will just stay under the radar as much as possible, some other cheats might also lead to collateral alerts with other checks. If your server is big or the regarded time is long, there certainly will be random amounts of false positive entries in the logs. It's another question, if there are special (plugin-based) effects or items with attributes involved, because there are a range of cases with the transition between switching states will lead to false positives.

    Plans are to allow skipping cascading violations, setting back silently and only notify on long repetition of violations (sf + passable), but that is not related to occasional false positives. Another thing is reworking the entire horizontal moving model, but that is a massive change and will need time to stabilize, similar to all builds after 853 representing the new y-axis handling, a fundamental change, for which we will still be finding edge cases for a while.

  • Avatar of Bobcat00 Bobcat00 Nov 29, 2015 at 13:16 UTC - 0 likes

    @asofold: Go

    I'm trying to look through the logs and checking the locations on the map. I see passable violations for a distance of 0.10 blocks in the Y axis while on a staircase. I see survivalfly violations that appear to happen while walking along the ground, navigating a hillside, or being inside a block. It hard to tell exactly.

    This has been going on a long time. It happened with 853. I was hoping 883 would fix them.

  • Avatar of asofold asofold Nov 29, 2015 at 12:32 UTC - 0 likes

    @Bobcat00: Go

    Can't judge without details.

    Guessing on survivalfly:

    • Could be cheating. Did you just update from build 853 or earlier?
    • Could be false positives (edge cases, or systematic.... can't say without details).
    • Could happen with latency after one set-back or shorter range teleport of any kind. This might be slightly better with ProtocolLib (3.6.4 for MC 1.7.10 or below and then NCP build 884 or later).
    • Build 886 does contain a fix for ender portal frame.

    Guessing on passable:

    • Passable will always/often show violations after teleport/join. Especially slow/laggy clients might. Could also happen after a set-back of other nature, due to latency. (see ProtocolLib note above)
    • Could still have false positives.
    • Build 886 does contain a fix for ender portal frame.
  • Avatar of Bobcat00 Bobcat00 Nov 29, 2015 at 11:36 UTC - 0 likes

    I'm still getting lots of Passable and SurvivalFly violations with 883. One player in particular has always been getting a lot of them. I don't know if he has a hacked client or if it's his slow/laggy Internet connection.


Date created
Apr 02, 2012
Last update
Nov 25, 2015
Development stage
GNU General Public License version 3 (GPLv3)
Curse link
Recent files