![[Tobirama] Account Guard](/community/data/resource_icons/10/10636.jpg?1785679931){kind=icon}
- Compatible XF 2.x versions
- 2.2
- 2.3
Layered protection that detects and blocks multiple accounts on your XenForo forum.
Clearing cookies will not bypass it. Private browsing will not bypass it. A VPN will not hide them.
A single check is a single point of failure. Account Guard runs multiple independent layers on every registration: hardware fingerprint, device identity, cookie identity, browser environment, IP address, subnet range and VPN status.
Beating one layer is not enough. Each layer that matches raises the risk score, and you control how much each one is worth. Below your threshold the registration passes, near it the account goes to manual approval, above it the registration is rejected.
Most anti multi-account add-ons live and die by a cookie. Delete it and they are blind.
Account Guard builds a hardware fingerprint from the graphics card, canvas output, installed fonts, screen properties, CPU cores, memory and more. None of it is stored in a cookie, so it survives cookie deletion, private windows and even a completely fresh browser profile on the same machine.
Every registration IP is screened for VPN, Proxy, Tor and fraud risk. Confirmed VPN usage is blocked outright. Suspicious but unconfirmed connections raise the score instead, so genuine users are not punished for a bad reputation IP.
Results are cached per address, so screening thousands of visits costs very little.
The Similar Members page groups accounts that belong to the same person and shows them side by side, with the oldest account as the primary and every alt listed beneath it.
It works on your existing member base, not just new registrations — accounts created years before you installed the add-on are still uncovered.
And it is built to avoid the mistake other add-ons make: shared office, university and mobile carrier addresses do not turn dozens of unrelated members into one false group. Addresses used by too many members are discarded, weak links are filtered out, and every limit is yours to tune.
Ban a single alt account, or wipe out an entire group at once. Your own account, administrators and moderators are protected and skipped automatically.
Members who legitimately share a connection — family, colleagues, students — go on an exemption list and are ignored by every check.
Every attempt is logged with the decision, the risk score, the IP address, the exact reasons behind the verdict, the accounts it matched and the VPN result. A statistics dashboard shows the breakdown over any date range, so you can see what your protection is doing before you tighten it.
The add-on works out of the box using its own built-in fingerprinting and IP rules. Two external services unlock the strongest layers, and both offer a free tier.
IPQualityScore — https://www.ipqualityscore.comRequired for VPN, Proxy and Tor detection. One API key.
FingerprintJS — https://fingerprint.comAdds server-verified visitor identification on top of the built-in fingerprint. Public key and secret key.
Clearing cookies will not bypass it. Private browsing will not bypass it. A VPN will not hide them.
Features
- Multi-layer detection system — several independent protection layers working together
- Clearing cookies does not defeat it
- Private and incognito browsing does not defeat it
- VPN, Proxy and Tor detection — registrations from hidden connections are blocked
- Reveals existing multiple accounts already on your forum, including those registered before you installed the add-on
- Ban an alt account, or an entire group of alt accounts, with one click
- Blocks the registration before the account is ever created
- Full audit log of every attempt and why it was allowed, flagged or blocked
What each feature does
Several protection layers, not one
A single check is a single point of failure. Account Guard runs multiple independent layers on every registration: hardware fingerprint, device identity, cookie identity, browser environment, IP address, subnet range and VPN status.
Beating one layer is not enough. Each layer that matches raises the risk score, and you control how much each one is worth. Below your threshold the registration passes, near it the account goes to manual approval, above it the registration is rejected.
Cookies are not the weak point
Most anti multi-account add-ons live and die by a cookie. Delete it and they are blind.
Account Guard builds a hardware fingerprint from the graphics card, canvas output, installed fonts, screen properties, CPU cores, memory and more. None of it is stored in a cookie, so it survives cookie deletion, private windows and even a completely fresh browser profile on the same machine.
VPN, Proxy and Tor detection
Every registration IP is screened for VPN, Proxy, Tor and fraud risk. Confirmed VPN usage is blocked outright. Suspicious but unconfirmed connections raise the score instead, so genuine users are not punished for a bad reputation IP.
Results are cached per address, so screening thousands of visits costs very little.
It shows you the alt accounts you already have
The Similar Members page groups accounts that belong to the same person and shows them side by side, with the oldest account as the primary and every alt listed beneath it.
It works on your existing member base, not just new registrations — accounts created years before you installed the add-on are still uncovered.
And it is built to avoid the mistake other add-ons make: shared office, university and mobile carrier addresses do not turn dozens of unrelated members into one false group. Addresses used by too many members are discarded, weak links are filtered out, and every limit is yours to tune.
One-click enforcement
Ban a single alt account, or wipe out an entire group at once. Your own account, administrators and moderators are protected and skipped automatically.
Members who legitimately share a connection — family, colleagues, students — go on an exemption list and are ignored by every check.
Nothing happens without a record
Every attempt is logged with the decision, the risk score, the IP address, the exact reasons behind the verdict, the accounts it matched and the VPN result. A statistics dashboard shows the breakdown over any date range, so you can see what your protection is doing before you tighten it.
Requirements
- XenForo 2.3.7 or newer
- PHP 7.4 or newer
Optional API keys
The add-on works out of the box using its own built-in fingerprinting and IP rules. Two external services unlock the strongest layers, and both offer a free tier.
IPQualityScore — https://www.ipqualityscore.comRequired for VPN, Proxy and Tor detection. One API key.
FingerprintJS — https://fingerprint.comAdds server-verified visitor identification on top of the built-in fingerprint. Public key and secret key.
![[Tobirama] Facebook Auto Publisher](/community/data/resource_icons/10/10910.jpg?1792144510){kind=icon}
![[Tobirama] Poll Pro](/community/data/resource_icons/10/10873.jpg?1791311488){kind=icon}
![[Tobirama] Image Watermark](/community/data/resource_icons/10/10852.jpg?1790801966){kind=icon}
![[Tobirama] Story](/community/data/resource_icons/10/10814.jpg?1790242532){kind=icon}