Project Zomboid: Security and Anti-Cheat for Dedicated Servers
Managing a public Project Zomboid dedicated server requires more than just performance tuning. With the rise of "griefing" scripts and cheat clients in 2026, server administrators must utilize the full suite of built-in anti-cheat tools and external security measures provided by their hosting service.
๐ซ Anti-Cheat Hooks
The game includes several "AntiCheat" protection levels (1-24) to detect speedhacking, item spawning, and health manipulation.
๐ Whitelisting
The most effective way to prevent mass-griefing is to require a password or unique Steam ID registration before joining.
Essential Anti-Cheat Settings
In your ServerSettings.ini (or via the admin UI), you should enable the following protection types:
- AntiCheatProtectionType1-24: Setting these to
trueprevents most common "cheat menu" functions. *Note: If you use complex mods, some hooks (like Type 12) may need to be disabled to prevent false positives.* - DoLuaChecksum: Set to
true. This ensures that clients have the exact same LUA files as the server, preventing "local-side" script injection. - VerifyUsername: Always set to
trueto prevent players from spoofing another user's identity.
Dealing with "Checksum" Errors
One of the most common dedicated server complaints is the "File doesn't match the server" error. This is actually a security feature. If your players encounter this:
- Ensure the server mod list matches the client exactly.
- Ask players to delete their
/Zomboid/Saves/Multiplayer/folder to clear cached data. - Check the
steam_dedicated_idto ensure the server has updated to the latest build.
Admin Security Best Practices
Never share your admin password via Discord or chat. Use the hosting panel to grant specific "Moderator" or "Admin" roles to players via their Steam IDs. This allows you to track actions in the logs and revoke access without changing the global server password.
Security Tip: Use a dedicated server with automatic backups. Even with the best anti-cheat, a determined griefer can burn down a base. Having a 1-click restore to a state 2 hours ago is your final line of defense.
Secure Project Zomboid Hosting
Sleep easy knowing your survivor's world is protected. At Supercraft, our Project Zomboid hosting includes hardened firewalls, automated backup systems, and a managed anti-cheat installer that configures all settings for maximum security without breaking your mods.