Keep alt accounts out.
Keep no readable IPs or emails.

AltWarden checks new Discord members for alt accounts, ban evasion, VPNs and raids. If its database were stolen tomorrow, the thief would find no IP addresses, no emails, no Discord tokens and no fingerprints.

This copy runs only on its owner's servers, and nobody else can add it. AltWarden is open source, so you can run your own.

Why it exists

In October 2026 the verification bot Double Counter said an attacker may have reached records on about 28 million Discord accounts, including about 27 million IP addresses. Have I Been Pwned lists about 275,000 email addresses from the leak. Verification bots collect that data because they need it for a moment. AltWarden uses it for that moment and keeps a keyed hash instead, under a separate key for every server.

No readable IPs or emails at rest

Addresses, cookies and fingerprints become keyed hashes before they touch the disk. Emails are never stored. Discord tokens are revoked seconds after sign-in. Discord IDs and names are kept, so staff can see who verified.

No ads, no trackers

The verification page loads no scripts, fonts, ads or trackers from any other site. The one outside request is the server's icon, from Discord. Ordinary ad blockers can stay on.

Try a rule in Watch first

Set a rule to Watch and it records a match and lets the member in. By default a rule stops people, and no preset is built on Watch, so this is a choice you make one rule at a time.

Alt matching that weighs evidence

Any one match on the connection, browser cookie or fingerprint makes a second account an alt, and the action you choose applies.

Raid mode

A spike in joins tightens the rules by itself and alerts staff, then relaxes when it's over.

Your members control their data

Anyone can see what's held about them and delete it, with no ticket and no waiting. The privacy page lists what stays.

What it does

  • Web, button and instant verification
  • Account age, profile picture, two-factor login
  • Throwaway email detection
  • Alt detection by cookie, fingerprint and connection
  • VPN, proxy, Tor, Private Relay and data centers
  • Mobile data rules
  • Country rules on a map or globe
  • Automated, anti-detect and tampered browsers
  • Fake browser identity, developer tools, private windows
  • Virtual machines, emulated phones, modified Pixels
  • Bot and suspect scores
  • Logs, alerts, audit log and analytics
  • Help desk threads, appeals, bypass links, honeypot
  • Per-page and per-command access rules, and Discord's own command permissions
  • Its own picture, name, bio and name style in each server