Detect and fight the exploitation of various flaws/bugs in Minecraft!

Features Permissions Commands Configuration Jenkins


NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.


Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or ticket request for cncp.


Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)

Downloads and History of Changes

  • Download officially approved versions on the Files page at BukkitDev.
  • Development builds have been moved over to the Jenkins at EcoCityCraft.
  • Do not download from any other source, do not use jars other people send you.
  • Changes by build number can be examined in the Jenkins changes list.
  • All commits can be seen in the GitHub commit history.
  • Plugin statistics are no longer reported to


Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new ticket or add to an existing ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of Bobcat00 Bobcat00 Mar 26, 2015 at 21:14 UTC - 0 likes

    @TJ1632: Go

    Modify the rules in the config file to remove the 'cancel' action. See

    Server: - Survival/PVP, 7 Mob Arenas, Creative World
    Web site:

  • Avatar of TJ1632 TJ1632 Mar 26, 2015 at 20:10 UTC - 0 likes

    @asofold What would I need to do in order to make it so that my staff got notifications but that the plugin didn't affect gameplay. If a player was hacking all I would want to happen is for my staff to be made aware; not have the plugin try to stop the hacker.

  • Avatar of asofold asofold Mar 25, 2015 at 21:53 UTC - 0 likes

    @Difd9: Go

    60-80 players already is a lot, "most" servers have much less players, of course you get "constant" input. False positives exist, partly for reasons, but at least they exist - in some checks you might configure to your needs, but for protectiong against some things one has to live with a few false positives in general (not meant final, but Minecraft+multiplayer isn't a combination that allows efficient anti cheating with some precision and without false positives).

    The leniency thing probably can't be added so easily, because we have a lot of configurability already and global/generic levels might just break custom configurations. Maybe there will be auto-config commands some day or we just fix things.

    Ping - we do account for server-side lag and on some checks for client-side lag too, we can't allow arbitrary amounts of congestion/lag, some checks are configurable concerning that.

    What version of Minecraft are you using and what version of NCP (just paste the output of the "ncp version" command)? Sometimes people just use outdated versions of NCP, ensure to use the lates (beta) release from BukkitDev at present.


    Latest beta release (1.8.x, this site) 3.13.0-BETA-sMD5NET-b878
    (Development builds, 1.8.x: Jenkins)

  • Avatar of Difd9 Difd9 Mar 25, 2015 at 19:48 UTC - 0 likes

    HOLY FALSE POSITIVES! When I even have less then 100 players on my server (60-80) I get reports NONSTOP. like seriously. I love the idea of an anti cheat but everyone keeps telling me: Anti-cheat is hitler. TPing people back even if they are not hacking. Could you add different levels of protection to the cheat plugin (for example a line that says leniency: 1-5 one being current settings 5 being for a server like mine) Also, PLEASE make it so that ping is a factor of how tight the anti cheat is. This plugin is completely unusable

  • Avatar of asofold asofold Mar 24, 2015 at 17:58 UTC - 0 likes

    @MCTylerPVP: Go

    NCP roughly does:

    • Detect cheating - however given how Minecraft is made and how plugins/software is made, there can be false positives, depending on the check more or less rarely, of course we try to reduce those as much as possible.
    • Prevent the effects of cheating. Sometimes this is directly possible, most of the time we can only limit what cheaters can do.
    • Log cheating depending on context. This can be in-game alerts, console, an extra log file.
    • Be highly configurable (what exactly to do when a cheat is detected, how/what to log, alter the sensitivity of checks, compatibility options for more or less specific contexts).

    Preventing cheating is probably the most important for most people who use this plugin :). The default alerts could be "better", however many people usually want many different "betters", so we put it roughly were most users might be. The alert system has not been made for showing to ordinary players, it's rather aimed at informed server staff (admins, mods, also server owners), due to false positives some configurations might need a little instruction or experience to actually judge.

    Informing players is a noble thing, but it'll end up not being too accurate, because nowadays hack clients tend to stay under the radar by adapting to anti cheating plugins, so unless for the "too simply coded hack clients", you'll be asking yourself "is this a false positive?". For some cheats one of the biggest jobs NCP is doing, is to set limits for cheat client developers, so they have to adapt to not get detected, hopefully allowing legit players to stand a chance in game play.

    @Robson112011: Go

    In theory you can use the latest version - we have kept the basic compatibility modules for 1.5.x, however it's been quite a while since we have tested 1.5.x ourselves, so it might be we have killed off compatibility with a general Bukkit-API dependency update. In any case if you use the latest (beta) release from BukkitDev, please test it on a test server first if any errors appear, we will still attempt to keep compatibility up, provided we are supplied with bug reports and that you test our suggested fixes.

    The current state of NCP should be "better" than the old versions, concerning cheating. Performance-wise it can't really be guessed in one go, because on the one hand there have been performance improvements like asynchronous logging or just optimizations, on the other hand the number of checks rather has increased and some of the damage API handling will be more inefficient on 1.5.x.

    So i suggest you try the latest (beta, 3.12.0 or later) release and please report back if there are any errors and maybe in any case the output of the "ncp version" command, so we can see if everyting is put right.

  • Avatar of Robson112011 Robson112011 Mar 24, 2015 at 12:11 UTC - 0 likes

    What the most recommended version for use in bukkit 1.5.2? Ps: I'm using 3.11.1, but I do not know if it is working correctly as the good old 3.9.3.

    Last edited Mar 24, 2015 by Robson112011
    I'm bilingual.
    I'm programmer of Artcraft servers. I'm braziliam.
  • Avatar of MCTylerPVP MCTylerPVP Mar 24, 2015 at 09:47 UTC - 0 likes

    @asofold: Go

    I guess I missed the point of this plugin and perhaps its functions are over my head. What I want is that if someone is cheating in the game I would at least like to notify other players as to the fact that they are not playing in a fair game. If I turn the messages off I might as well remove the plugin and save Ram. I will try to tweak the settings so "normal" commands do not send alerts...Thank you!

    MC Client WebPage

  • Avatar of asofold asofold Mar 23, 2015 at 11:04 UTC - 0 likes

    @MCTylerPVP: Go

    How about turning the console messages off, if you don't want any? Do note this is Minecraft-multiplayer and not a 2-bit simulation of "good weather vs. bad weather" :p, false positives are pretty common. We will certainly always work towards reducing false positives, however we do rely on user-feedback to fine-tune settings, and we do encourage server owners to configure for their needs, there are too many different approaches to what people want to see and what not.

  • Avatar of MCTylerPVP MCTylerPVP Mar 22, 2015 at 23:48 UTC - 0 likes

    @asofold: Go

    I'll try your latest version 1st then I will look at alternative solutions...Thanks!

  • Avatar of asofold asofold Mar 22, 2015 at 01:06 UTC - 0 likes

    @MCTylerPVP: Go

    @MyPictures: Go

    The passable check triggering after teleports/join is a usual thing to happen. It might reach some level with slowly rendering clients.

    The passable violations don't really tell much, because one attempt to move through a 5 blocks thick wall gets you one violation, but the vanilla Minecraft client might produce level 40 just with rendering chunks and sending "fake slow falling" moves while rendering chunks.

    It's probably totally legitimate to remove the log actions from the passable check.


Date created
Apr 02, 2012
Last update
Nov 25, 2015
Development stage
GNU General Public License version 3 (GPLv3)
Curse link
Recent files