Help Center

Keep your bot token safe

How to protect your token and what to do if it leaks.

  1. Treat your bot token like a password. Anyone who has it can control your bot.
  2. Store it only as an environment variable in your bot settings. Do not put it in code, screenshots, public repositories or support messages.
  3. Hartwell staff will never ask you for your token.
  4. If it might have leaked, open the Discord developer portal and reset the token immediately, then update the environment variable on Hartwell and restart your bot.
  5. Remove the old token from any code you shared, and check your bot for unexpected activity.

Never share your password, a bot token, a private key or card details with anyone, including Hartwell staff.

← All help articles