Stoatmod / Protection / Join protection

Join protection.

Give suspicious new accounts a private verification path before they can fully participate, with clear expiry and moderator recovery controls.

All features

A more considered welcome.

Give new accounts a private verification step and moderators a clear recovery path.

Plan your join protection
  • Verification: Private member link
  • Default scope: Accounts under 14 days
  • Recovery: Moderator bypass

The walkthrough

How it works.

From your settings to the result your team can review.

  1. 01

    Check the new arrival

    Account age and the server’s verification settings determine eligibility.

  2. 02

    Send a private check

    The member receives a verification link before the challenge is applied.

  3. 03

    Complete or review

    A completed check releases the timeout; moderators have a bypass command.

01

Default eligibility

Join protection is off by default. Server moderators can enable a browser CAPTCHA for accounts younger than 14 days. A separate dashboard option can require verification for everyone and is disabled by default. Accounts younger than seven days are highlighted in logs.

  • A private verification link is sent first.
  • A one-day timeout is applied when the challenge is created.
  • The member has 30 minutes to complete the check.
  • Three failed checks or expiry can lead to a kick.
02

Important delivery and rollback behaviour

If Stoatmod cannot deliver the private message, it does not apply the timeout or challenge. If setup fails after a timeout is applied, it attempts to roll the member back and records whether moderator action is still needed.

03

Commands

~join-protection status

Review the current state.

~join-protection enable

Enable account-age verification.

~join-protection disable

Disable new challenges.

~bypass USER_ID REASON

Release one pending member after moderator review and record why. Replace USER_ID and REASON before sending.

04

Use join protection responsibly

  • Explain verification expectations in server rules.
  • Keep a moderator recovery route for people who cannot receive a private message.
  • Members must agree to the verification privacy notice before the browser CAPTCHA loads. Stoatmod performs no IP or alternate-account scan.
  • Verify that timeouts are released after successful completion.

Keep exploring

All features
Guide

How to strengthen a Stoat server against abusive joins

Documentation

Configure automod and protection

Documentation

Security and operational safeguards

Make it part of your server

Your community.
Your configuration.

Add Stoatmod Plan your join protection →