Security
Protect your bot token, keep developer bots separate, and respond to a leaked token.
Keep control of your bot by protecting its token. This page explains where to use it, why developers need a separate bot, and what to do if it leaks.
Your bot token is encrypted
A bot token is the key to your bot. Anyone who holds it can control your bot completely. They can sign in as the bot and act under its name, using the permissions it has in your server. Those permissions can include reading messages, sending messages, managing roles, or taking moderation actions.
Keep your token private
Paste your token only into the official AeroNexus dashboard. Never paste it into Discord messages, support tickets, emails, source code, or another website. Don't include it in screenshots, recordings, or screen shares. Anyone helping you with setup can guide you without seeing your token.
Give your developer a separate bot
If your developer needs a bot token, create another Discord application and bot for their work. Give them that separate bot's token, never the token for your AeroNexus bot.
Running your developer's code and AeroNexus through the same bot can cause conflicting commands, duplicate responses, and other compatibility issues. Sharing the token also lets the developer act as your AeroNexus bot, including taking malicious actions that appear under the same bot name. Those actions could be mistaken for actions taken by AeroNexus. A shared bot identity alone doesn't establish who performed an action.
Resetting a token replaces the key for the same bot; it doesn't create a separate bot. Use a separate application to keep your developer's work independent.
Reset a leaked token immediately
If you share the token, expose it on screen, or suspect someone else has it, reset it immediately. Deleting the message or screenshot isn't enough.
- Open the Discord Developer Portal and select your application.
- Open Bot and select Reset Token.
- Copy the new token and update it in the AeroNexus dashboard. If you're still in setup, return to the token step and check the new token.
- Review your server's audit log and recent bot activity for unexpected changes.
Resetting the token invalidates the old one. AeroNexus needs the new token to reconnect your bot. If you need help, contact support without sending either token.
Next steps
Once your token is secure, continue with Create your bot to connect your bot in the dashboard.
Last updated on