> ## Documentation Index
> Fetch the complete documentation index at: https://docs.authenticateme.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# Account settings

> Screen the Discord account behind each member with checks for account age, avatars, MFA, emails, attempts, and alt accounts.

Account checks look at the Discord account itself. Account Age, Avatar Required, and Max Verifications run in every [verification mode](https://docs.authenticateme.xyz/setup/verification-modes.md), while the rest need Web-Link.

## Account Age

Require accounts to be a minimum age to complete verification.

![The Account Age card with a 7 day minimum](https://mintcdn.com/authenticate-me/doqmYpEurtBuXylj/images/settings/card-account-age-light.webp?fit=max\&auto=format\&n=doqmYpEurtBuXylj\&q=85\&s=a516c444a6b50200c09b4f396294b913)

| Option | Value |
| - | - |
| Days | 1 to 2555 days. The default is 1. |
| Action | Log, Kick, or Ban |
| Modes | All |

New accounts are the easiest way to evade a ban or raid a server. Members whose account is too young are told when they'll be old enough to try again.

## Avatar Required

Require members to have an avatar to complete verification.

![The Avatar Required card](https://mintcdn.com/authenticate-me/doqmYpEurtBuXylj/images/settings/card-avatar-required-light.webp?fit=max\&auto=format\&n=doqmYpEurtBuXylj\&q=85\&s=3e66bb61394083bebcff1446752f63a9)

| Option | Value |
| - | - |
| Action | Log, Kick, or Ban |
| Modes | All |

Accounts still using Discord's default avatar fail this check. It filters out many throwaway accounts, but some real members never set an avatar, so start with **Log** if you're unsure.

## Block Alternative Account

Block alternative accounts of verified members from verifying.

![The Block Alternative Account card with its three detection methods](https://mintcdn.com/authenticate-me/doqmYpEurtBuXylj/images/settings/card-block-alternative-account-light.webp?fit=max\&auto=format\&n=doqmYpEurtBuXylj\&q=85\&s=93113de10e914bd45421cfb11280a323)

| Option | Value |
| - | - |
| Detection methods | IP Address, Cookie, and Fingerprint. All three are on by default. |
| Main Account Action | Log, Kick, or Ban. The default is Log. |
| Alternative Account Action | Log, Kick, or Ban. The default is Kick. |
| Modes | Web-Link |

When someone verifies, AuthenticateMe compares their connection and browser with members who already verified in **your server**. If they match, the new account is treated as an alternative account of the earlier one, which is the main account.

| Method | What it matches |
| - | - |
| IP Address | The same internet connection |
| Cookie | The same browser, using a cookie set on the verification page |
| Fingerprint | The same device, even across browsers |

> [!WARNING]
>
> The **Main Account Action** applies to the member who verified first. Setting it to Kick or Ban removes both accounts, which is strict but also catches people who share a home or a network. Many servers keep the main account on **Log** and act only on the new one.

The log shows both accounts, which method linked them, and whether their operating system and browser also match.

## Block Disposable Email

Block accounts with a disposable email from verifying.

![The Block Disposable Email card](https://mintcdn.com/authenticate-me/doqmYpEurtBuXylj/images/settings/card-block-disposable-email-light.webp?fit=max\&auto=format\&n=doqmYpEurtBuXylj\&q=85\&s=2d555195740ffce63177b0a9cf673096)

| Option | Value |
| - | - |
| Action | Log, Kick, or Ban |
| Modes | Web-Link |

Throwaway inboxes are a common way to create accounts in bulk. Only the domain of the member's Discord email is checked, and well-known providers such as Gmail, Outlook, Yahoo, iCloud, and Proton are always allowed.

## Honeypot

Catch spammers by acting on anyone who posts in a trap channel.

![The Honeypot card with its channel, action, timeout, and whitelisted roles](https://mintcdn.com/authenticate-me/doqmYpEurtBuXylj/images/settings/card-honeypot-light.webp?fit=max\&auto=format\&n=doqmYpEurtBuXylj\&q=85\&s=d9559bf35d773b21308efca4fe79bb6c)

| Option | Value |
| - | - |
| Channel | A dedicated channel nobody should post in |
| Action | Log, Timeout, Kick, Softban, or Ban |
| Timeout duration | How long a Timeout lasts, up to 28 days |
| Whitelisted Roles | Members with these roles are ignored |
| Modes | All |

Spam bots tend to post in every channel they can see. Create a channel that real members have no reason to use, and AuthenticateMe deletes anything posted there and acts on the author once. Messages from webhooks are only logged.

AuthenticateMe pins a warning message in the channel, which you can customize with the paintbrush on the card. Its text shows even for members who turned embeds off.

> [!WARNING]
>
> Turn off **Create Public Threads**, **Create Private Threads**, and **Send Messages in Threads** for `@everyone` in the Honeypot channel. Messages posted in threads slip past the Honeypot. AuthenticateMe also needs **Manage Messages** there.

## Max Verifications

Limit how many times a member can fail verification.

![The Max Verifications card](https://mintcdn.com/authenticate-me/uiYE6L6ar1H7VuT4/images/settings/card-max-verifications-light.webp?fit=max\&auto=format\&n=uiYE6L6ar1H7VuT4\&q=85\&s=d7e8b541ff30b447ae7141151080a321)

Click **Configure** to set the limit.

![The Max Verifications window with attempts, role, and reset options](https://mintcdn.com/authenticate-me/uiYE6L6ar1H7VuT4/images/settings/max-verifications-modal-light.webp?fit=max\&auto=format\&n=uiYE6L6ar1H7VuT4\&q=85\&s=e60ec26131a5f11ca2257337d116c987)

| Option | Value |
| - | - |
| Attempts | 1 to 100 failed attempts. The default is 5. |
| Action | Log, Kick, or Ban |
| Role | A role to give members who reach the limit. Only used when the action is Log. |
| Reset Attempts | Gives members their attempts back after a while. Off by default. |
| Reset After | 5 minutes to 30 days, counted from the attempt that reached the limit |
| Modes | All |

Only failed attempts count. Members who hit the limit see "Maximum verification attempts reached", plus when they can try again if resets are on. You can give someone a fresh start with [Reset verification](https://docs.authenticateme.xyz/moderation/reset-verification.md).

## MFA Required

Require members to have MFA enabled to complete verification.

![The MFA Required card](https://mintcdn.com/authenticate-me/uiYE6L6ar1H7VuT4/images/settings/card-mfa-required-light.webp?fit=max\&auto=format\&n=uiYE6L6ar1H7VuT4\&q=85\&s=3a9d10a5e005dc05f2b4e9f89ae0e27c)

| Option | Value |
| - | - |
| Action | Log, Kick, or Ban |
| Modes | Web-Link |

Members need two-factor authentication turned on for their Discord account. Accounts protected this way are much harder to farm. Send members who fail to [the MFA guide](https://docs.authenticateme.xyz/help/verification-errors/2fa.md).


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.