Detect and fight the exploitation of various flaws/bugs in Minecraft!

Main Features Permissions Commands Configuration Jenkins


NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or ticket request for cncp.


Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have".

Downloads and History of Changes

  • Download officially approved versions on the Files page at BukkitDev.
  • Development builds have been moved over to the Jenkins at EcoCityCraft.
  • Do not download from any other source, do not use jars other people send you.
  • Changes by build number can be examined in the Jenkins changes list.
  • All commits can be seen in the GitHub commit history.
  • Plugin statistics are no longer reported to


Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new ticket or add to an existing ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of asofold asofold Oct 09, 2012 at 20:28 UTC - 0 likes

    @finamenon: Go

    Currently we have Configuration and Dev Pinboard for reference. Both will be updated with the upcoming release, but might be missing some entries.

    If you have a particular question or aim to reach just ask, or open a support ticket.


    Latest release (1.7.2-1.7.10, approved) NoCheatPlus 3.11.1-RC-sMD5NET-b743
    (Development builds: Jenkins)

  • Avatar of finamenon finamenon Oct 09, 2012 at 20:07 UTC - 0 likes

    Is there documentation anywhere on what exactly the numbers actually mean in the config file? I feel like any changes I make are completely arbitrary because I don't know, for example what "minimum, factor, weight, level" etc... actually do. Am I missing out on something?

  • Avatar of MyPictures MyPictures Oct 09, 2012 at 19:09 UTC - 0 likes

    @LordKainzo: Go

    We do not have a premium support or anything like that so you don't need to pay us for help :)

    Heroes skills can only be fixed in Heroes uses the NC+ API. There are 2 ways to do this: 1. Heroes developers use the NC+ API to allow heroes skills working with NC+ 2. Over the plugin CNCP (CompatNoCheatPlus). Block breaking n stuff should be doable without problem only when it gets to the moving stuff its a bit harder to do. But lets see what @asofold says to this.

    Stairs are still an issue kinda yea, @asofold tried some fixes on the SurvivalFly check but sometimes it still makes wrong alerts. Please try with build #147 or up, should be much better on those builds.

    NC+ should be pretty save in the latest state, so you should be protected on the most critical hacks.


  • Avatar of LordKainzo LordKainzo Oct 09, 2012 at 17:31 UTC - 0 likes

    @Asofold ugh! Having so many issues - going to update to the latest.

    I wish I could pay for some premium support to help me crack down on some of these issues.

    Still having issues with players sneaking down steps, still getting a lot of rubber bands, most of the heroes skills arent supported at all (anything to do with velocity appears to be shot)

    I've had to grant such high values that I'm not even sure I'm being protected against actual hackers.

  • Avatar of asofold asofold Oct 09, 2012 at 17:29 UTC - 0 likes

    @matagin: Go

    Difficult to judge. Are the players trusted? Do any warnings or log messages show up (depending on config in the server log or nocheatplus.log or in-game or not at all)?

    It could be the dynamic reach adaption by the fight check, but that would not adapt to lower than possible distance (for not moving players).

    Also some checks deal time penalties for attacking.

    Important is to find out how to reproduce the issue, if people are moving away from each other, it can happen that the are in range on client side and out of range on server side, esepcially with lag, but also simply due to the latency. The reach check does account for lag by extended reach, but adapts dynamically if players hit on long distance (preventing all time aura effects). Also it would deal a penalty time (500 millisecond by defaults) for violations. "/ncp info playername" should reveal if the player has violations on that account, before testing "ncp remove playername" would ensure that no old violations are shown. Reducing the penalty time for reach might help, you can also deactivate reach adaption setting "reduce: false".

    Another check that deals penalty time for attacking is the yawrate component, which prevents attacking if people turn too much for certain actions like attacking (...), throwing stuff, shooting bows.

  • Avatar of matagin matagin Oct 09, 2012 at 17:02 UTC - 0 likes

    I'm seeing an issue where every few minutes or so, players are not able to hit other players and mobs. We have NCP build #145 and the latest cncp. Is there a check I can tweak to fix this? Maybe it's related to the forcefield check.

  • Avatar of asofold asofold Oct 09, 2012 at 15:46 UTC - 0 likes


    What rates ? Edit: Also which checks? If block lag, it would only be fastbreak usually.

    Usually this would be lag of some kind, or you have an old version running ?

    Which blocks + tools/enchantments is it ?

    The invisible blocks is a Minecraft issue when mining downwards.

    Last edited Oct 09, 2012 by asofold
  • Avatar of HOUSEMASTERR HOUSEMASTERR Oct 09, 2012 at 15:16 UTC - 0 likes

    Default settings provided give a lot of false positives for breaking various blocks with enchanted diamond tools. For the client it looks like "block lag" where the blocks don't disappear, or they get stuck jittering inside invisible blocks until they relog. This happens with only NCP installed on vanilla minecraft server. (lag isn't involved, happens with 20 tps too).

    Only thing that worked out for me was disabling those checks entirely. Changing rates didn't seem to work.

  • Avatar of MyPictures MyPictures Oct 09, 2012 at 14:54 UTC - 0 likes

    @asofold: Go

    Someone tested noclip on our server and he did lose health when he got trough walls yea.

  • Avatar of asofold asofold Oct 09, 2012 at 14:41 UTC - 1 like

    @MasterGabeMOD: Go

    @np98765: Go

    Technically i am not sure how they do it, i have heard of one hack that might lead to moving events not being fired with the right coordinates or not being fired at all. That is somewhat unconfirmed though.

    Noclip hacks are still possible, certainly. CraftBukkit only puts through moving events that mean a minimum distance from the last set position for the player. In effect the hack clients could make a bigger step towards a wall then within the unguarded distance step into the wall. NCP allows them to move inside of the block, currently. That has been done to let players not be trapped while they should not be in vanilla. I can certainly add stuff to prevent abuse further. Provided moving events are fired at all, it should be possible.

    Did the players lose health in that?

    Important edit: Please do activate the moving.morepackets check, it is light in comparison and is currently necessary to back up against flying.

    If i find some more time (next century?) , i will probably switch to / add other accounting methods to flying checks to make them more accurate, lag-independent, morepackets-independent, potentially easier to make compatible. maybe

    Last edited Oct 09, 2012 by asofold


Date created
Apr 02, 2012
Last update
Sep 21, 2014
Development stage
GNU General Public License version 3 (GPLv3)
Curse link
Recent files