Documentation

AltShield never sends verification links by DM. When you join a server that set up a verification channel, you'll normally get a private thread there (visible only to you and staff) with a personal verification link. Either way, you can always get a fresh link yourself by running /verify in the server, or by clicking a "Verify" button on a pinned panel message if the server has one set up. To prevent spam, there's a 3-minute cooldown between requesting your own link this way - if you hit it, just wait a moment and try again. Staff can always generate you a link with /sendverify regardless of this cooldown.

Opening your link shows the "Requirements" the server has configured. Depending on the server, this can include:

• Nothing to do at all - some requirements (like a minimum Discord account age) are checked automatically from your Discord account.
• Signing in with Google - a normal Google sign-in, used to confirm your account and, on servers that require it, that Google already lists the email on it as verified. Nothing is sent to your inbox and you don't have to click anything in an email. AltShield never sees or asks for your Google password.
• Signing in with Discord - on servers that check your Discord email or 2FA, you sign in with Discord once so the bot can read those two yes/no answers. Your email address is never stored.
• Signing in with Steam - a normal Steam login, used to check things like account age, owned games, playtime, account level, or VAC/Community/trade ban status. AltShield never sees or asks for your Steam password.
• Signing in with Twitch - a normal Twitch login, used to check account age, or (on servers that enabled it) whether you're subscribed to or banned on the streamer's channel. AltShield never sees or asks for your Twitch password.
• Signing in with Roblox - a normal Roblox login, used to check things like account age, ban status, friend count, or Verified Badge status. AltShield never sees or asks for your Roblox password.
• Signing in with Battle.net - the official Blizzard login, used to check your World of Warcraft character level. AltShield never sees or asks for your Battle.net password - and unlike every other platform here, nothing about your Blizzard account is ever stored either: your character level is checked live each time, and only a one-way hash of your account ID is kept, solely to stop the same account being used to verify more than one Discord account.
• Signing in with Epic Games - the official Epic Games login, used to confirm you own an Epic account. AltShield never sees or asks for your Epic Games password.

Only the platforms the server's rules actually need are shown - if a server accepts more than one way to pass (for example "Steam OR Twitch"), you may not need to connect everything listed. A "Current status" section on the page shows which accounts are connected so far - it deliberately doesn't reveal whether that's actually enough to pass, so there's nothing to game. The submit button unlocks once there's nothing left you could still connect to change the outcome either way; verification happens automatically the moment that's true, so you rarely need to click it yourself.

Some servers also turn on a quick CAPTCHA as a basic anti-bot check right before the submit button. It's unrelated to the requirements above - solving it doesn't replace them, it just has to be done in addition before you can submit.

After submitting, you'll land in one of these states:

• Verified - you're done, the server's verified role is applied automatically.
• Not verified - one or more requirements weren't met; the page lists exactly which ones and why. If a server also has alt-account detection set to "Kick" or "Ban" and your account matches an existing one, you may additionally be removed from the server itself, not just left unverified.
• Awaiting manual review - you passed the requirements, but the server also has alt-account detection set to "hold for review", so a staff member needs to confirm your account manually. This is usually quick.
• Link expired - verification links are only valid for a limited time (set by the server). Run /verify again for a fresh one.

A server's requirements are built from individual checks combined with logic groups. Understanding the groups helps make sense of what a "Current status" list is asking for:

• ALL of (AND) - every check/group inside has to pass.
• ANY of (OR) - at least one check/group inside has to pass.
• AT LEAST N of - at least N of the checks/groups inside have to pass (e.g. "at least 2 of: Steam connected, Twitch connected, owns 5+ Steam games").
• NOT (single condition) - passes only when the one condition inside it does not pass.

These can be nested arbitrarily, so a server might require something like "Discord account 7+ days old AND (Steam account 1+ year old OR owns a specific game)".

Checks a server can use:

Discord checks

Check	What it means
Discord account age	Your Discord account must be at least a minimum age. Checked automatically, nothing to connect.
Discord avatar	Your Discord account must have its own avatar (not the default one). Checked automatically, nothing to connect.
Discord email is verified (needs Discord login)	Discord reports the email on the member's account as verified. The member signs in with Discord once on the verification page; AltShield reads only that yes/no flag, never the address itself.
Discord 2FA is enabled (needs Discord login)	The member's Discord account has two-factor authentication turned on. Needs the Discord sign-in; only the yes/no flag is read.

Account age and avatar are checked automatically with no sign-in. The email and 2FA checks need the member to sign in with Discord, and it has to be the account the link was made for. Discord does not share phone-verification status with any app, so there is no check for it. See the Privacy Policy.

Google checks

Check	What it means
Google account connected	Just requires signing in with Google, no other condition.
Google account has a verified email	Google already reports the email address on the connected account as verified. Nothing is sent to anyone's inbox and nobody has to click a link - AltShield only reads that yes/no flag, never the address itself.

AltShield keeps only a one-way hash of your Google account ID (to stop the same account verifying more than one Discord account) - see the Privacy Policy for details.

Steam checks

Check	What it means
Steam account connected	Just requires signing in with Steam, no other condition.
Steam account age	Your Steam account must be at least a minimum age.
Owns Steam game	You must own a specific game on Steam.
Minimum Steam games owned	You must own at least a minimum number of Steam games.
Min. hours played in a game	You must have at least a minimum number of hours played in a specific Steam game.
Min. total Steam hours played	Your total playtime across all your Steam games must meet a minimum.
Minimum Steam level	Your Steam level (from Steam Community XP/badges) must be at least a minimum.
No VAC ban	You must not have a VAC ban on your Steam account.
No Community ban	You must not have a Steam Community ban on your account.
No trade ban	You must not have a trade ban (or be on trade probation) on your Steam account.
No game ban	You must not have a game ban on your Steam account - a ban issued by a specific game's own anti-cheat or moderation (unlike VAC above, which is Valve's own system). Steam only reports this account-wide, as "has at least one game ban somewhere" - it never says which game, so this can't be limited to one specific title.

A couple of these depend on your Steam privacy settings: if your "Game details" privacy is set to private, AltShield can't see your owned games or playtime at all, which looks identical to owning nothing. If a check involving games/playtime keeps failing unexpectedly, try setting Steam → Edit Profile → Privacy Settings → "Game details" to Public and verifying again. The verification page always tells you when this might be the cause. Your Steam level and ban status, on the other hand, are always public - they aren't affected by any privacy setting.

Twitch checks

Check	What it means
Twitch account connected	Just requires signing in with Twitch, no other condition.
Twitch account age	Your Twitch account must be at least a minimum age.
Subscribed to your Twitch channel	You must be an active subscriber of the server's connected Twitch channel.
Not banned on your Twitch channel	You must not be banned/timed out on the server's connected Twitch channel.

The two Twitch-channel checks ("Subscribed to..." / "Not banned on...") only work on servers where the server owner has connected their Twitch channel in the dashboard - if they haven't, those checks simply won't pass for anyone, with a message explaining why.

Prefer typing to clicking? In the rule builder, switch from Tree to Code and write your rule as a small script. Nothing is run: AltShield only turns the text into the same rule the visual editor builds.

Example

if (captcha && (discord.accountAge >= 14 || google.connected && google.emailVerified))
  verify
else
  block

How it reads

• Conditions are checked from top to bottom, and the first one that matches decides.
• verify lets the member in, block rejects them. A missing else means block.
• && is AND, || is OR, ! is NOT. atLeast(2, a, b, c) means at least 2 of the conditions.
• You can nest if statements, group them with { } and add comments with //.

Available checks

Good to know

• Your rule only changes after the code is valid and you press Apply code. Mistakes are underlined in red, with the line and column.
• Comparisons use >=, >, <= and <. Equality (==) is not supported, and hours use >=.
• A rule that would let everyone in, or reject everyone, is not accepted.
• Switching between Tree and Code never loses your rule. Writing code and applying it replaces the whole rule.

These extra layers work on their own, whichever platforms a server requires. Admins switch them on in the dashboard.

• Anti-VPN - Blocks verification attempts coming through a VPN, proxy, Tor or datacenter connection. The connection is checked once, at the moment someone verifies - privacy first.
• Device fingerprinting - Catches a second Discord account verifying from the same device and network, or from the same browser (recognised by a security cookie set on the verification page), using one-way pseudonymized values. People who merely share a household aren't flagged, and staff never see the raw IP address or device details.
• Region lock - Allow or block verification by the visitor's country or continent (pick them on the interactive globe in the dashboard), and either reject them outright or hold them for manual review. The country is used for the check only. Available with Plus.

See the Privacy Policy for exactly what is and isn't kept.

1. Invite the bot to your server (link available from the Dashboard once you log in with Discord).
2. Run /setup in your server, or open the server from the dashboard directly.
3. In the dashboard, configure:
   • Roles & channels - which role to grant on success, an optional role to give unverified members while they wait, a fallback channel for the verification thread, and a log channel for results. If you don't pick a verified role, nobody receives a role when they verify - pick one here, or let the setup wizard create it for you.
   • Verification requirements - the rule builder described above, plus an optional CAPTCHA toggle that adds a basic anti-bot check before the submit button.
   • Smart verification - Instead of building rules yourself, let AltShield adjust itself and evaluate each account.
   • Twitch channel connection - only needed if you want the subscriber/ban checks; a one-time Twitch login for your own channel, separate from the login members do. Until a channel is connected, those checks are skipped (members pass without them) and the log channel gets a warning.
   • Alt-account detection - links a verified Steam/Twitch/Roblox account (or, for Battle.net, Epic Games and Google, a one-way hash of the account ID) to the first Discord account that used it, so a second Discord account reusing the same account can be blocked, flagged, held for manual review, kicked, or banned from the server.
   • Anti-raid mode - Watches for a sudden wave of joins and, while it lasts, asks newcomers for more (older account, CAPTCHA, an extra connected account) and alerts your log channel. Free, switched on automatically with Smart verification (otherwise off until you enable it), and staff can use /antiraid on, off or extend.
   • Protection - Anti-VPN, device fingerprinting and region lock - see the Protection section above.
   • Alt Account Map (Plus) - a visual map of which Discord accounts on your server share an identity or a device: each shared identity is a hexagon ("same Steam ID", "same device"...), each account a card with its status (verified, blocked, kicked, banned, flagged or sent to review). Accounts on other servers that reused one of those identities also appear, anonymously, as an "another server" node: no account, name or server is shown, only that the identity was used there.
   • Setup wizard - a short set of questions about your community (speed or protection, account age, avatar, alternatives for younger accounts, alts) that builds your verification rules - or a ready-made preset - which you can then tune freely in the rule builder.
   • Messages and Branding - customize the wording and (on Plus) the look of the verification page and of the bot itself.
4. New members can get a private verification thread automatically on join (if enabled and a verification channel is set), and can always request their own link with /verify, or by clicking a persistent panel posted with /verifypanel. AltShield never delivers links by DM.

Plus is billed through Stripe - click Get AltShield Server Plus below, sign in with Discord, pick your server, and pay securely on Stripe's own page. Manage or cancel anytime from your server's dashboard.

Get AltShield Server Plus

AltShield only ever uses the official OAuth login flow for Discord/Steam/Twitch/Roblox/Battle.net/Epic Games/Google/Riot Games - it never sees or asks for your password on any platform. What gets stored per verification session is limited to what the configured checks actually need: your Discord account age/ID, and, only if you connected them, your Steam ID / account age / owned games list (or playtime), your Twitch ID / account age, your Roblox ID / account age / ban status / friend count / Verified Badge status, and your Riot ID/PUUID / League of Legends summoner level / solo-duo rank / match count. Battle.net, Epic Games and Google are the exceptions: nothing about your Blizzard, Epic Games or Google account is ever stored, not even temporarily - only a one-way keyed hash of your account ID is kept, purely to detect the same account verifying more than one Discord account.

If a server has alt-account detection enabled, your Steam ID, Twitch ID, Roblox ID, and/or Riot PUUID (or, for Battle.net, Epic Games and Google, the one-way hash described above, not your Discord messages or any other activity) may be compared against other verification attempts to catch the same real-world account being used to create multiple Discord accounts - either within that one server, or across every server using the same bot, depending on how that server configured it. On servers with the Plus plan, the alt account map may also show, anonymously, that an identity was used by further accounts on other servers (no account, name or server is revealed).

Full legal details: Terms of Service and Privacy Policy.