Mastering Terraria TShock Servers: Commands and Anti-Grief
Opening a Terraria server to the public without protection is a recipe for disaster. Within hours, griefers will join, steal from chests, dynamite spawn, and dump lava on player houses. Unlike games constructed with server-side authority from the ground up, vanilla Terraria trusts the client entirely. If a hacked client tells the vanilla server "I just mined the entire map," the server complies.
The absolute defense against this is TShock. TShock is an extensive server administration framework acting as a wrapper around the Terraria dedicated server. It intercepts malicious packets, introduces complex user-groups, and supports extensive plugins. If you are starting a public community in 2026, TShock is mandatory. This guide explains how to properly configure it.
Initial Setup and the Superadmin Account
When you first launch a TShock environment (which you can do with 1-click on Supercraft), the server generates a unique setup token in the console output.
- Join your server. Because you haven't assigned permissions yet, you will play as a restricted guest.
- In the game chat, type:
/setup [YOUR_TOKEN] - The server will prompt you to create an account prefix. Type:
/user add YourName YourPassword owner - Log into your new account using:
/login YourName YourPassword - Finally, turn off setup mode:
/setup
You are now the SuperAdmin and possess unrestricted access to all TShock commands.
Essential Anti-Griefing Tools
TShock's default configuration immediately stops obvious hacking (like illegal item spawning or excessive movement speed), but you need to lock down the world geography.
Region Protection
You can define invisible boundaries in the world and specify exactly who is allowed to edit blocks within them. This is perfect for protecting the main Server Spawn.
/region define "Spawn"
[Click the top-left block with your pickaxe, then the bottom-right block]
/region protect "Spawn" true
Now, only users in administrative groups (or users explicitly added to the region) can place blocks or open chests in that area.
Disabling Explosives
Bombs, Dynamite, and Holy Hand Grenades can bypass certain protections if not configured correctly. In your `config.json` folder (under `/tshock`), locate the setting for `DisableBuild` and `DisableExplosives`. By ensuring TShock actively monitors explosive damage, you stop griefers from blasting craters into protected towns.
Cheat Protection Settings
TShock evaluates player stats. In the configuration file, ensure the following validations are set to `true`:
AntiCheat.DisableInvisHackAntiCheat.KickOnDamageThreshold(Kicks players using illegal weapons dealing 99,999 damage)AntiCheat.MaxInventorySlots Validation
Configuring User Groups
TShock utilizes a hierarchy of groups. Every player who joins is assigned to the "guest" group by default. Guests should have minimal permissions—usually just the ability to chat and perhaps warp to spawn.
You can modify groups in the `groups.json` file. Create a progression path:
- Guest: Can chat, `/spawn`. Cannot build until registering.
- Member: Must use `/register` and `/login` to acquire. Gained building rights.
- VIP: Gained through playtime or donations. Access to cosmetic commands, `/color`, and private warps.
- Moderator: Can `/kick`, `/ban`, and `/mute` players. Can bypass region protection to fix issues.
- Admin: Can use `/give`, `/time`, and manage the server configuration.
Top TShock Plugins for 2026 Communities
TShock allows you to inject DLL plugins to extend functionality even further.
1. Crossplay Plugin (Native/TShock)
If you want mobile and console users to connect to your PC TShock server, there are specific Crossplay plugins that translate the network packets between the versions, seamlessly uniting your player base.
2. Server Side Characters (SSC)
Normally, Terraria players store their inventory on their local PC. This ruins public servers, as players can bring in end-game gear they acquired in single-player. Enabling the SSC feature forces players to have a fresh, server-specific inventory that only exists when they are actively logged into your server. It guarantees an even playing field and functional economy.
3. Economy Plugins
Install plugins like `Wolfje.Economy` or `Essentials` to give players a digital bank account. They can earn money by killing mobs or selling items to a shared digital shop, creating a thriving player-to-player marketplace.
Conclusion: The Infrastructure for Success
TShock transforms Terraria from a casual co-op game into a robust, MMO-lite platform. Mastering its commands and permissions ensures your community can grow in a safe, structured environment.
However, TShock does add overhead to server CPU usage. To ensure your anti-cheat checks run instantaneously without lagging the player, you must host on premium hardware. Secure your community's future and deploy an optimized TShock Server with Supercraft today, gaining access to 1-click installations, extreme CPU frequencies, and comprehensive DDoS mitigation.