Currently, I have: Bound the servers to 127.0.0.1 Made it so if a user tries to join with a premium username but the UUIDs do not match they get kicked Implemented a custom authentication system (Secured with SHA256) And I am going to set up: An anti-bot script A custom ban system that bans IPs but if the account is premium, also the UUID Do I need to do anything more?