MINECRAFT HOSTING
SPIELESERVER
Game PanelA bot token is the bot's password. Anyone who has it can control your bot, send messages as it, and read what it can read.
Keep it out of your files
Put the token in the Discord bot token field under Settings, then Game Settings. Your bot reads it from the environment variable DISCORD_TOKEN:
- Node.js:
process.env.DISCORD_TOKEN - Python:
os.environ["DISCORD_TOKEN"] - Java:
System.getenv("DISCORD_TOKEN")
That way the token is not in a file you might upload to a public git repository, send to a friend for help, or paste into a screenshot.
Do not share the field either
People you invite to your server through the panel's user access can see its settings. Only give access to people you trust. See How to invite friends and give them access.
If your token leaks
- Open the Discord Developer Portal, choose your application, open Bot and click Reset Token. The old token stops working immediately.
- Paste the new token into the Game Settings field.
- Restart the server.
- If the old token was in a public repository, remove it from the repository history as well, since a search can still find it.
Discord also scans public code for tokens and may reset a leaked one for you. If your bot suddenly goes offline with a login error, a reset is the most likely reason.
