Tools
Password and secret generator for servers
An RCON password, a Velocity modern forwarding secret, a management server secret, or just a strong password. Generated in your browser with a cryptographic random generator — with ready lines for your configs.
Passwords and secrets
rcon.password in server.properties.
Generated in your browser with crypto.getRandomValues and never sent anywhere.
—RCON doesn't encrypt the connection: the password and commands can be intercepted. Connect from the same machine or over an SSH tunnel, and never expose the RCON port.
Where a Minecraft server needs secrets
RCON gives remote access to the server console, and the only protection is rcon.password. A short password can be brute-forced, so the generator gives 32 characters by default. Even so, RCON doesn't encrypt traffic: minecraft.wiki advises connecting to it locally only.
Velocity modern forwarding passes a player's name, UUID and IP to your servers and signs that data with a secret: a server trusts only a proxy that knows it. The secret lives in the forwarding.secret file on the proxy and in proxies.velocity.secret in each Paper server's config/paper-global.yml.
management-server-secret belongs to the server management protocol added in 1.21.9: clients send it in the Authorization header. It's exactly 40 Latin letters and digits; leave it empty and the server fills it in.
A password guards the console; an anticheat guards the server from cheaters. DGuard, the best anticheat for a modern Minecraft server, works behind Velocity and BungeeCord and is free up to 30 players online.
Read in the knowledge base
FAQ
How long should an RCON password be?
The longer the better: 32 random characters can't be brute-forced. But the main rule is never to expose the RCON port to the internet: the connection isn't encrypted.
Where do I get the Velocity forwarding secret?
Velocity creates a forwarding.secret file with a random string on first start. You can replace it with your own — then put the same secret in proxies.velocity.secret on every Paper server.
Is this generator safe?
The secret is created in your browser by crypto.getRandomValues and never reaches our server. Every press gives a new one.
What is management-server-secret?
The secret of the server management protocol (since 1.21.9): exactly 40 Latin letters and digits, sent by clients in the Authorization header. If the key is empty, the server creates one itself.
The tools are free. So is anti-cheat protection
DGuard — the best anticheat for a modern Minecraft server — catches all 47 cheat types in our comparison; the nearest rival, Intave, catches 27. Free up to 30 players online, with the same protection as on paid plans.