Is Discord Safe and Secure? Your 2024 Guide to a Big Chat App

There’s little wonder that Discord has boomed in recent years. Combining the old-school feel of community forums with real-time chatting, audio/video calls, and lots of GIF spamming; it’s a popular online hangout spot.

But, while it’s often the preferred platform for gaming groups, fan communities, businesses, podcasts, student groups, and more — is Discord safe to use? Unfortunately, I really can’t give you a simple yes or no answer. It’s complicated.

There are a ton of vibrant, wholesome Discord spaces that offer a safe place to engage with like-minded people — but there are other, more harmful areas you should avoid. The platform gives you some control over your privacy, but it also collects a ton of data, and it’s not clear what it uses that data for. The chat app’s public and accessible nature also makes it a hotbed for scammers.

I’m an active Discord user (and a moderator for a handful of communities) and I’ve researched the platform’s security features, data use, and past security breaches, so you don’t have to. Let’s dive in.

How Does Discord Work?

Discord is a fairly simple chat app and social network, available as an app on Windows, macOS, Android, iOS, and Linux, or through a browser. It allows people to communicate in real time within community groups (known as “servers”). Servers can range from small groups of friends to huge communities containing thousands of users, and each one has its own rules.

As servers grow, they often add separate conversation rooms (“channels”). In most community spaces, you’ll typically see some kind of general channel, followed by separate interest channels where users stick to one topic of conversation, like gaming, music, anime, or memes. You can chat through text, send images and videos, or join audio or video chat channels. You can even play games through the platform.

Discord is popular for gamers, streamers, and other content creators because it offers a ton of tools for building, maintaining, and moderating a community space. Through the Discover tab, you can find communities for almost everything. Games like Fortnite, Roblox, Counter-Strike, Apex Legends, and Pokemon Go are especially popular.

In recent years, Discord has also launched a Student Hub, which helps students find servers associated with their school, college, or university.

The Study Together server has 550,000+ members who help keep each other accountable while studying

The image above is a typical Discord server. On the far left side, you have a list of all the servers you’re a member of. Underneath the server’s name in the next column, you can see all of the server’s channels you have access to (marked with a #). Then, you’ll see the chat in the main column and a list of users to the right.

The color of a user’s name usually demonstrates their role in the server. “Roles” are a list of permissions that outline what channels and tools that person has access to, and these vary in each server. For example, the Study Together server has roles that give you access to channels to discuss Biology, Chemistry, Physics, and Maths.

Discord is free to use, but it has a paid subscription called Discord Nitro. You don’t need to pay for this if you don’t want to, but it offers some extra perks like being able to use animated emojis and a server’s custom emojis in other servers and direct messages.

Public vs. Private Servers

Discord has a decent amount of privacy and security options, with the main one being the ability to set servers to Public or Private if you have admin privileges.

Both public and private servers are invite-only spaces, so the main difference is how you obtain an invite link. To join a private server, you have to be invited by a server owner or admin. In a public server, anyone with permission can invite new users.

Every server visible on the Discovery tab is public, but not every public server can be found this way. Servers have to be eligible for Discovery by meeting certain criteria. When a server joins the Discovery tab, anyone can read through its content before they join.

Private servers offer the best level of…well, privacy. You have better control over who can join. Public servers can be just as secure, but it depends on how they’re set up and who can create invite links. For example, the public community server I’m most active in only allows the server owner and moderators to create invite links. Others allow anyone to invite new users, so they’re a bit less secure.

If you’re concerned about your online security, take extra precautions on servers available through the Discovery tab. Fortunately, there are a good number of privacy settings you can use to minimize your risk, which I’ll show you shortly.

Content Moderation

Discord uses AI to monitor and remove violations of its Community Guidelines. It publishes regular transparency reports and has strict policies regarding misinformation and hate speech, occasionally even banning users for their online behavior outside of the platform. However, as with most social media networks, moderation isn’t always accurate and doesn’t always catch spam bots or harmful individuals. I’m speaking from experience as a server moderator here — sometimes, things do slip through the cracks.

That’s why every good Discord server will have moderators. Moderators, or mods for short, are people that the server owner trusts to enforce rules and keep the chat safe. We have access to a ton of different tools that help us with this, and Discord is trialing new things all the time. Mods can also block users from the server, give them time-outs (so they can’t post for a certain period), or delete posts.

AutoMod (the settings on the right) lets moderators set up rules for automated actions

Mods can also report users to Discord’s Trust & Safety team for manual review if that person has gone against the Community Guidelines. This can result in additional repercussions, such as the account being banned.

So, a Discord server is only as trustworthy as its admins and moderators. These people should be visible, so you know who to go to if another user is making you feel unsafe or is breaking rules.

Is Discord Safe?

Well, it’s a bit like driving a car. The vehicle itself can be pretty safe, but you still have to follow the road signs and look out for other drivers. Likewise, Discord’s safe as long as you take the proper precautions to protect yourself.

Should Kids Use Discord?

First things first, Discord has an age limit of 13+. If your child is younger than that, they're technically not allowed on the platform. This age limit is set per US federal law, specifically the Children’s Online Privacy Protection Act (COPPA). That said, Discord’s various app store ratings are telling. Apple’s App Store changed Discord’s age rating to 17+, while Google’s Play Store has a “Parental Guidance Recommended” warning for the app.

The platform also allows the creation of NSFW (Not Safe For Work) channels, which are supposed to be restricted to 18+ users. These channels may contain content that's not appropriate for younger users. However, there’s nothing to stop anyone under 18 from accessing these channels. As with some other adult content, anyone can click through to see inappropriate content.

Discord doesn’t verify the age of its users, so kids can potentially see inappropriate content

There are various monetized elements too. Kids might be tempted to pay for Discord Nitro or subscribe to their favorite creator’s server. And, depending on the server, they may feel pressured to do so to fit in with the community or receive attention from its creator.

And now here's the part we all wish I didn't have to talk about. Unfortunately, there have been instances where Discord was used by harmful individuals to groom children. Public servers can be joined by anyone, and not everyone has good intentions. It's crucial to monitor who your children are interacting with online, especially on platforms that allow anonymous communication. Skip ahead for my top tips on keeping kids safe on Discord.

What Data Does Discord Collect?

Discord collects 3 main kinds of data:

• Your basic info. When you sign up, Discord asks for an email address, username, and password. You don’t have to provide your real name (and I recommend you don’t use it). If you provide payment information, it stores that too. And, as you might expect, it holds onto IP addresses, device IDs, and any other hardware or software configuration data.
• Chat logs. Yep, Discord keeps track of your conversations and may store anything you do on the platform. This includes any of your posts, uploaded files, your profile information, and more.
• User activity. Like most platforms, Discord monitors your activity. This means the servers you join, the channels you frequent, and how long you're logged in. If you’re a moderator, it also stores any moderation actions you take.

Privacy policies that use the word “generally” are a red flag for me

All in all, Discord’s privacy policy is very vague. Despite the platform saying that it “generally” doesn’t store the content of video and voice calls, this leaves room for it to collect this data without having to tell you. It’s best to assume that anything you do on Discord will be stored. That said, the privacy policy states that Discord doesn’t sell your data to third parties and that all the data it collects is to improve its services.

Discord has also introduced an AI chatbot and AutoMod, both of which are powered by OpenAI (the team behind ChatGPT). There are a variety of other AI-powered tools in the works, too. While the platform says that OpenAI can’t access any Discord data for training purposes, there’s nothing in the privacy policy to say that your information isn’t being used to train its own AI tools.

Personally, I find the amount of data that Discord collects to be excessive, though you can mitigate this to some degree in your Privacy & Safety settings:

This won’t totally stop Discord from harvesting data, but it’ll mean it gets less information from you

Discord messages aren’t protected by end-to-end encryption either. Instead, everything is transmitted by the HTTPS protocol, which is the same transport layer security (TLS) security used by login pages on websites. It’s a legitimate and fairly secure protocol with a basic degree of encryption. But, this encryption isn’t as strong as that used by, for example, WhatsApp. WhatsApp and other secure messaging services use the industry-standard AES-256-bit encryption protocol.

All of this is especially worrying considering Discord has suffered security breaches in the past. In 2022, the company admitted to having fulfilled fake legal requests, resulting in user data being handed over to cybercriminals. In the same year, Discord was fined €800,000 by France’s CNIL (National Commission on Informatics and Liberty) for GDPR violations. The CNIL said Discord had an insufficient data retention policy, poor password management, and had failed to properly secure user’s personal information.

Discord has since rectified these issues — but it hasn’t stopped collecting your data.

Editors' Note: Expressvpn and this site are in the same ownership group.

Warning: Watch Out For These Discord Threats

Like any social media platform, Discord is used by spammers, scammers, and hackers. But don’t worry — they’re actually pretty easy to avoid once you know what to look for.

Phishing Scams

This usually involves receiving a message that seems too good to be true. These often promise things like free game codes, Discord Nitro, Robux, crypto prizes, or NFTs (remember those?). In reality, these are scams used to steal your game accounts (like Steam, Ubisoft, or Battle.net), Discord logins, or other personal information.

The first thing you need to ask yourself is, “Is this legit?”. So, look out for:

• Typos galore. Don’t rely on this, though — a lot of scammers use AI tools to generate phishing messages these days, so they can look trustworthy. But it’s the first sign that something’s not quite right.
• Weird URLs. If you don’t recognize a website link (or you’ve not asked for it), don’t click it. That’s internet safety 101.
• FOMO. The “Fear Of Missing Out” is one of the oldest psychological tricks in the book. If you win a competition you haven’t entered and need to “claim your prize” in a certain time window, it’s almost always a scam.
• New accounts. You can click on a username to see how old the account is and when it joined the server you’re in. If you’ve never talked to that person before, their account is relatively new (usually around a week old), and they don’t have a profile picture or bio, don’t interact with the user and simply block them.

Malware

Just like other social networks, hackers use Discord to spread malware. You’ll most commonly find adware (programs that send you annoying and dangerous pop-ups), spyware and info-stealers (such as SpideyBot), ransomware (like AxLocker), and Remote Access Trojans (RATs) that allow hackers to control your device. These can be disguised as game tools (like the spyware “fallguys”) or even challenges (like the TikTok Invisible Challenge that tricked Discord users into downloading malware).

Hackers can even connect their malware to their Discord servers by building bots for the platform. In one example I researched, hackers used a custom bot that would send information about infected devices — and every action users took on these devices — to a private Discord channel. They could even send commands to the malware through Discord to record a user’s microphone and webcam. Scary stuff.

And the worst part? Everything that’s posted to Discord’s Content Delivery Network (CDN) stays there forever. So if someone grabs all that information from you, it’s right there on Discord’s servers. That is unless someone deletes the posts or server, but how thoroughly those things are removed from the platform’s stores is another question.

So in short: watch out for malware. Don’t download any files from Discord unless it’s from someone you implicitly trust and have a chat history with.

Impersonation Scams

I’ve seen an uptick in these kinds of scams recently and they take 2 main forms. In some cases, an existing user account is compromised, usually through a phishing attack. Fun fact: this is what happened when the Sea of Thieves Discord server was hacked.

This gives the hacker admin (or mod)-level privileges, so they can wreak havoc on servers or use the victim’s established trust to scam server members. Plenty of mods in large community servers have been compromised in this way. The hackers can also use the mod’s reputation to gain access to other server members’ accounts by tricking them into revealing their Discord key (a unique token that’s required to make changes on your account or servers).

As an alternative method, a scammer can set up a Discord account that looks extremely similar to an existing trusted user. The username might be one character off (e.g. Emna instead of Emma), or use alternatives that are hard to differentiate from one another (like a capital “I” instead of a lowercase “l”). This makes it more likely that someone will fall for a phishing scam or download malware, as the victim will think, “Hey, I trust them.”

To stay safe from these kinds of accounts, always be aware of who you’re talking to. If you’re chatting with another user directly, you can see your chat history with that person. Use the history to check if their tone of voice isn’t what you’d expect. And, if someone new appears in your server claiming to be a trusted member on a new account, take it with a grain of salt. Don’t trust them until they can prove they are who they say they are.

Top Tips for Staying Safe on Discord

Just like with any other social network, you need to take some basic steps to protect your Discord account and your data from snoops and hackers:

• Enable Two-Factor Authentication (2FA). This means you have to enter a secret code delivered through SMS or a trusted authenticator every time you log in to Discord, adding an extra layer of security. It should be paired with a strong password too.
• Turn on DM filters. You can tell Discord to check every incoming message (or only those from people who aren’t on your friends list) for spam. Plus, you can turn this on specifically for images to keep yourself safe from explicit or inappropriate content.
• Turn off DM privileges. For an extra level of protection, you can choose not to allow server members to send you direct messages. You can optionally override this rule for specific servers you trust. For example, I have this turned on for servers I moderate and off everywhere else.
• Restrict friend requests. Discord lets you decide whether you can receive a friend request from anyone, a friend of a friend, or other server members. It’s recommended to not accept friend requests from users you don’t know.
• Report anything suspicious. If you think you’re being contacted by a spammer, or if someone’s behavior on Discord makes you uncomfortable, you can report them to server mods or Discord’s own support team.
• Don’t download unfamiliar files. Always operate a zero-trust model, even with people you know well. If they send you a file (particularly if it’s a.exe file), check that they’re acting like themselves. If you’re still suspicious, use another platform to verify why they sent you a file.
• Be careful of account connections. Discord can connect to a variety of accounts, like Twitch, Spotify, X (Twitter), and more. Don’t connect any accounts that contain personal information, as anyone who can see your Discord profile can find them.
• Review servers before you join. Only join servers if you’ve been invited by someone that you know and trust. If you’re joining a server from the Discovery tab, check through the server before you agree to join.
• Don’t post any personal information. Carefully review what you post to any Discord server that contains users you don’t personally know. Don’t use your real name on the platform and be careful about any photos or videos you post — particularly if they’re of your local neighborhood. If you’re joining video chats, check your background to make sure there are no identifying details.
• Only use moderated servers. Server admins and mods should be visible and active, and they should’ve set clear rules and expectations for how users should behave in the channel.
• Keep the app updated. Discord regularly updates its apps with security and bug fixes — make sure you’re using the latest version for the best protection. For the same reason, it’s worth ensuring your device and antivirus software is also fully up to date.

How to Keep Kids Safe on Discord

If your kids are using Discord, you should also consider the following:

• Talk about online privacy and safety. Like any social network, Discord comes with the risk of cyberbullying, stalking, harassment, and predators. Make sure your kids know what information they shouldn’t share online and what to do if someone asks them for that information. You can even go through Discord’s privacy settings together and explain why they’re an important part of staying safe.
• Use the Family Center. This lets you see their friend list, what servers they’re in, and who they’ve been on calls with and when. You can’t see the messages they send, though.
• Use the available age restrictions. There’s an option to prevent access to age-restricted bot commands in Direct Messages (DMs), but not in servers. You can also turn off the visibility of 18+ servers on iOS, but not on any of the other Discord apps.
• Vet the servers they’re joining. Discord is largely a safe place for kids if they’re just using it to chat with friends they already know in real life. However, public community servers (and particularly those in the Discovery tab) can be harmful for teens.
• Don’t provide your payment information. This is because some servers can be monetized, and your child could be pressured to subscribe and donate significant amounts of money. Alternatively, you could allow your child to use a prepaid card so you can control their spending. If your kid just wants to use Discord Nitro, you can purchase it for them yourself as a gift within the app.

The downside is that none of Discord’s settings are password protected. If your child knows where these settings are, they can just switch them back. That means it’s extra important to establish a culture of trust with your teen if they’re using Discord. Help them to understand that they can’t trust everyone they chat to. Most importantly, help them feel comfortable enough to come to you if another user is making them feel uncomfortable.

Kids should only have a Discord account if they’re 13 and above. That being said, as their guardian, it’s ultimately up to you to judge whether they’re mature enough to use the platform safely. Even then, you should make sure they understand how to stay safe online before they start using Discord.

FAQs on Discord Safety

Can someone track me from my Discord?

That depends on what you post. Anyone can find your IP address from Discord, and I found guides explaining how to do so easily. This is a huge privacy issue, though keep in mind that other users can’t find your exact street address from this. That said, they can still get this information (or at least get a better idea) unless you stay careful about the personal information you post on Discord servers.

How do I protect my child on Discord?

Make sure they’re over 13 first as that’s the recommended age limit. Then, follow these tips for keeping kids safe on Discord. For example, before they create a Discord account, have a conversation with them about online privacy, how to stay safe, and establish a line of communication they can use if another user makes them feel uncomfortable.

For extra peace of mind, I recommend using the Family Center. This is a set of parental controls for Discord that let you see who your child is talking to and when, plus what servers they’re in. So, you’ll get more visibility over what they’re doing online without compromising their privacy (you can’t see the contents of their messages).

Is Discord safe for students?

It’s complicated. Discord’s Student Hub can help students find other people enrolled at the same school or on the same course. Schools and educators often use Discord servers to create virtual classrooms, where lessons, resources, and discussions can happen 24/7 — which the Student Hub can also help a student find. Because these servers are controlled by the school, they’re well-moderated and entry is controlled.

However, like any online platform, Discord is not without its risks. Students can be exposed to inappropriate content, cyberbullying, and potentially dangerous individuals if they join other public servers or engage with strangers. Due to this, educators and parents must be proactive in monitoring Discord use, establishing rules, and promoting safe online behaviors.

Which is safer, Discord or Slack?

That depends on how you’re using these platforms. If you're an individual looking to chat with friends, both Discord and Slack have sufficient security measures in place, such as 2FA. However, for professional or corporate use where data sensitivity and compliance are concerns, Slack generally offers more robust and tailored security features. Discord’s privacy policy is very vague, which won’t be enough for businesses looking for full control over their data.

Is Discord safe for video calls?

Generally, yes — but you should still take precautions. You can choose to video call directly with another user, and other users can only join in if you invite them. If you run a server, you can also add privacy controls to video call channels to restrict who can access them. Bear in mind that Discord isn’t clear about whether it stores your video calls, though.

Discord doesn't provide end-to-end encryption either, a feature available in some other video-calling apps like WhatsApp and Signal. End-to-end encryption ensures that only you and the person you're communicating with can view what's sent. So, if ultra-high security is a necessity for you, you might want to consider other services.

What is Better Discord, and is it safe?

BetterDiscord is a modification for the Discord app that adds new features and customizations, including themes, plugins, and enhanced settings. It's often used by people who want to personalize their Discord experience beyond what the official application allows. But, because it’s a third-party application that allows further third-party plugins, you may risk downloading malicious files if you’re not careful.

Using BetterDiscord goes against Discord’s Terms of Service too, so you could risk your account being banned for using it. If you're looking to keep your Discord account in good standing and to prioritize your online security, it might be best to stick with the features offered in the official app.

So, Is Discord Safe to Use?

The answer isn't exactly black and white — think of it more like a shade of gray. On one hand, Discord does have some built-in security features like 2FA and robust moderation tools. On the flip side, just like any social platform, it's a playground for scammers, spammers, and hackers eager to spoil your fun and steal your data. Discord itself can store a lot of your personal information.

That's why it's crucial to take precautions like vetting server invitations, scrutinizing suspicious links, and always keeping your privacy settings on high alert. Remember, the key to a safe Discord experience is being aware and vigilant. Equip yourself with the right knowledge and tools, and you'll be chatting, gaming, and memeing away without a hitch.