Guide · November 6, 2026 · 3 min read
Is this Discord bot safe? A 7-point method
New all-in-one bots appear every week. Recent does not mean dangerous, and well known does not mean risk-free. Here is how to judge any bot before handing it the keys to your server.
Contents
How do you know if a Discord bot is safe?
A Discord bot is reasonably safe if its publisher is identifiable, it justifies its permissions, it publishes a privacy policy and it keeps active support. No single criterion is enough, and no bot is risk-free: its token can leak and its owner can change.
The 7 things to check
- Permissions. Read the list on the invite screen. A music bot has no reason to ban. A security bot does need high rights.
- Publisher. A website, legal notices, a reachable person or company.
- Invite link. Use the official site. Beware of namesakes: several bots sometimes share a name.
- Data. Does the privacy policy say what is kept and what goes to third parties, including AI services?
- Support. A server where someone answers, even awkward questions.
- Track record. Look at the bot's age, past incidents and how they were handled.
- Trial. Test on an empty server first and watch what the bot actually does.
Is the verified badge enough?
No. The badge shows that Discord verified the developer and allowed certain access. It certifies neither code quality nor how your data is handled. It is a good sign, not a guarantee.
Warning signs
- You need a link sent by private message to add it.
- It demands a QR code scan or your account token. Never do this.
- No privacy policy and no publisher.
- A promise of free Nitro or a reward for adding it.
What about new all-in-one bots?
Recent bots such as HurixBot or Nexora present themselves in bot directories as moderation, ticket or community tools. We have not tested them and say nothing against them: apply the same checklist as for any other bot. For Nexora, check which one you are adding, because several bots use that name.
A new bot simply has no track record yet. That is true of OriusBot too, which is also recent, so do not take our word for it: check our legal notice and privacy policy.
Should you accept Administrator?
Only if the bot really needs it and you trust it. Every administrator bot is a way in if its token leaks. OriusBot asks for this permission too, because anti-nuke and rebuilding must act on channels and roles. The decision is yours.
Frequently asked questions
Are Discord bots dangerous?
Most are not, but each one acts with the rights you give it. The risk comes from a malicious bot, a stolen token or a change of owner.
Can a bot read my private messages?
Not your conversations with other people. It sees messages sent to it and the channels it can access.
What should I do if a bot misbehaves?
Remove its roles, kick it, then review the audit log. Our server under attack guide covers the next steps.
Read next : Security checklist, Permission audit, Best free Discord bots.