Security
Passwords
- Use a long unique password
- Do not reuse across services
- Change immediately if you suspect compromise
SASL & Cloaking
SASL authenticates you during connection setup. Cloaking (+x) hides your IP from other users.
SSL/TLS
Use the SSL port (e.g. 6697). Prevents sniffing on local networks.
Social Engineering
Never send passwords to 'admins'. Official announcements use signed messages or known channels.
Spam & Phishing
- Do not open dubious short links
- Do not run commands you do not understand
- Report suspicious users
Account Protection
- Stay active (inactive accounts may be removed)
- Use vHost only for legitimate names
Additional Hardening Tips
- Prefer SSL (ircs://) endpoints; avoid plain-text on public Wi‑Fi if possible.
- Never paste raw service auth tokens in public channels or paste sites.
- Audit your client scripts/plugins; disable ones you do not trust.
- Report suspicious clones or mass joins to staff early (#help).