Detect and fight the exploitation of various flaws/bugs in Minecraft!

Features Permissions Commands Configuration Jenkins


NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.


Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp.


Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)

Downloads and History of Changes


Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of dotapurex1 dotapurex1 Feb 06, 2014 at 04:51 UTC - 0 likes

    Is NCP broken on build #565? For some reason, hackers are able to run at super speeds?

    This is how my config is looking:


  • Avatar of Wizel603 Wizel603 Feb 05, 2014 at 23:36 UTC - 0 likes

    Running b656. Almost every time I "/ncp reload", some random player gets kicked with "WrongBlock: broke another block than clicked".

    Last edited Feb 06, 2014 by Wizel603
  • Avatar of asofold asofold Feb 05, 2014 at 19:33 UTC - 0 likes

    @karstvgl: Go

    Please see here: Ticket 676


    Latest beta release (1.8.x, this site) 3.13.0-BETA-sMD5NET-b878
    (Development builds, 1.8.x: Jenkins)

  • Avatar of karstvgl karstvgl Feb 05, 2014 at 13:49 UTC - 0 likes

    You really need to do something for the NCP bringing you back, since the new Ctrl-Sprint Button. It is really anoying if you play, for example, PvP on the Overcast Network ( Is this possible? (PS I read the Known Issues, but did not see this on there)

  • Avatar of asofold asofold Feb 03, 2014 at 09:30 UTC - 0 likes

    @matagin: Go

    Best practices is to first find out which checks are too sensitive for your taste, then configure accordingly if possible.

    Typically one would need to somehow isolate a situation.

    If you have dedicated testers and a test server or a low player-count phase (really low) then you could go for in-depth logs and such, but i assume you will want to go for an online production server strategy, because installing extra plugins this is more like what an official "NCP-tester" would do, e.g. install TestNCP and create debug outputs etc.

    So the best practices is about isolating the issue "as good as possible" - you have players that claim it does not work, the following steps:

    • Call them in to reproduce the issue, or be there when they do something supposedly similar. If possible rely on players that are rock solid non-cheaters, to not have them use a hacked client, but random players might do too.
    • Use the "ncp remove (player)" command to ensure no past-violations are recorded in the history, for the lazy "ncp remove *" does it neatly.
    • Let the players fight/reproduce.
    • Use "ncp info (playername)" to see what checks alerted. This will not be interpretable at a glance (warning!), because some checks generate high violation levels some don't, but the violation count 'n' can give an idea of what checks.

    (Optional for the not-lazy: configure NCP to output more or any-at-all violation logs and do another iteration of the above).

    Rather test a couple of times, e.g. during a tournament do "ncp remove (...)" and "ncp info (...)" and just dump the output to a file or copy from log/client-log later. Also include the nocheatplus.log entries for the time of testing and maybe the server.log, depending on what is turned on. Do remove/change ips and player names if you want so.

    Just pm or "present" us the logs for a quick look.

    One thing you can directly: set checks.fight.direction.strict to false (it seems too strict).
    We are having fight checks in focus right now, so some default config and even implementation might change soon.

    Last edited Feb 03, 2014 by asofold
  • Avatar of matagin matagin Feb 03, 2014 at 06:38 UTC - 0 likes

    Do you guys have any advice or best practices on specific checks to modify so that PvP combat is not affected too much? I'm trying to find the right balance for my players.

  • Avatar of asofold asofold Feb 02, 2014 at 12:59 UTC - 0 likes

    @arnofrutos: Go

    The pvp hacks do "work" and gain some advantage, but they should be limited by a lot, so at least a skilled fighter stands some chance to win.

    So the interesting thing is how much they can do. We will try to reduce false positives for fight checks first, then we will advance towards making them more effective.

  • Avatar of arnofrutos arnofrutos Feb 02, 2014 at 10:15 UTC - 0 likes

    @MyPictures: Go

    Most hacks that are used on my server are pvp hacks like killaura.

  • Avatar of MyPictures MyPictures Feb 01, 2014 at 23:51 UTC - 0 likes

    @arnofrutos: Go

    Velocity is handled on the client side so effectively preventing it is close to impossible, the client has the upper hand here. What are the other hacks you are talking about except that knockback back? Maybe we can do something.


  • Avatar of arnofrutos arnofrutos Feb 01, 2014 at 21:17 UTC - 0 likes

    Lot of hacks are still not blocked :'( for ex. antiknockback


Date created
Apr 02, 2012
Last update
Jan 31, 2016
Development stage
GNU General Public License version 3 (GPLv3)
Curse link
Reverse relationships
Recent files



Optional dependency