DWIRC:Security & SASL Auth

📘 DWIRC Guides & Tutorials

Guides

• Getting Started
• IRC Client Setup
• Mobile Connection Guide

Security

• Security & SASL Authentication

Channel Management

• Channel Management Tips

📚 Learn to Connect, Secure, and Manage Your IRC Experience

File:Dwirc-guides.png

🔐 TLS & SASL Authentication

Protecting your connection and IRC account is important when using the DarkWorld IRC Network.

This guide explains how to:

• Connect securely using TLS encryption.
• Verify the IRC server certificate.
• Authenticate automatically using SASL.
• Protect your NickServ password.
• Troubleshoot common TLS and SASL problems.

DarkWorld IRC connection settings

Setting	Value
Network name	DarkWorld IRC
IRC server	irc.darkworld.network
Secure port	6697
Encryption	TLS enabled
Certificate verification	Enabled
SASL mechanism	PLAIN
SASL username	Your registered NickServ account name
SASL password	Your NickServ account password

Recommended connection address:

irc.darkworld.network:6697

Always enable TLS and certificate verification. Do not accept an unexpected certificate warning without first checking the server address and contacting DarkWorld IRC support.

🔒 What is TLS?

TLS stands for Transport Layer Security.

TLS encrypts the connection between your IRC client and the DarkWorld IRC server. It helps prevent other parties on the network path from reading or modifying data travelling between your device and the IRC server.

A secure DarkWorld IRC connection should use:

• Server: irc.darkworld.network
• Port: 6697
• TLS or SSL option: enabled
• Certificate verification: enabled

TLS protects data while it is travelling between your device and the IRC server. It does not make public channel messages private and does not replace good password, account or device security.

TLS and the PLAIN SASL mechanism

The SASL mechanism used by most IRC clients is called PLAIN.

The name does not mean the entire IRC connection is unencrypted. It means the SASL credentials must be protected by the encrypted TLS connection.

For this reason, only use SASL PLAIN when:

• TLS is enabled.
• The connection uses port 6697.
• The server certificate is valid.
• Certificate verification is enabled.

Never configure SASL PLAIN over an unencrypted IRC connection.

Certificate warnings

If your IRC client reports that the certificate is expired, untrusted or does not match irc.darkworld.network:

1. Do not disable certificate verification.
2. Do not permanently accept the unexpected certificate.
3. Confirm that the server address is exactly irc.darkworld.network.
4. Confirm that the port is 6697.
5. Confirm that your device date, time and timezone are correct.
6. Update your IRC client and operating-system certificate store.
7. Contact DarkWorld IRC support if the warning continues.

When asking for help, provide the exact certificate error. Do not include any password, authentication token, private key or recovery code.

🔑 What is SASL?

SASL stands for Simple Authentication and Security Layer.

SASL authenticates your registered NickServ account while the IRC connection is being established. This normally identifies your account before automatic channel joins and before commands requiring an identified account are used.

SASL is safer and more reliable than placing a NickServ IDENTIFY command in an automatic perform list.

To use SASL, you must already have a registered DarkWorld NickServ account.

Your SASL username should be your registered NickServ account name. It may be different from the nickname currently displayed by your IRC client.

🧩 SASL setup by IRC client

mIRC

Graphical setup

1. Open Tools → Options.
2. Select Connect → Servers.
3. Add a new server entry or edit your existing DarkWorld entry.
4. Enter irc.darkworld.network as the server address.
5. Enter +6697 as the port.
6. Select SASL as the login method.
7. Enter your registered NickServ account name as the SASL username.
8. Enter your NickServ password as the login password.
9. Save the server entry and connect.

The plus sign before 6697 tells mIRC to establish a secure connection.

mIRC field	Value
Description	DarkWorld IRC
Address	irc.darkworld.network
Port	+6697
Login method	SASL
SASL username	Your registered NickServ account name
Login password	Your NickServ account password

Do not enable any option that bypasses an invalid server certificate.

mIRC connection command

Advanced users may connect with:

/server -e irc.darkworld.network 6697 -l sasl YourNickServPassword -lname YourAccount

Replace:

• YourAccount with your registered NickServ account name.
• YourNickServPassword with your NickServ password.

Using the graphical server configuration is recommended because entering a password in a visible command can expose it through screenshots, command history or accidental pasting.

HexChat

1. Open HexChat → Network List.
2. Select DarkWorld and choose Edit.
3. Add irc.darkworld.network/6697 to the server list.
4. Enable Use SSL for all servers on this network.
5. Keep the option that accepts invalid certificates disabled.
6. Enter your normal nickname.
7. Select SASL (username + password) as the login method.
8. Enter your registered NickServ account name as the username.
9. Enter your NickServ password.
10. Save the configuration and connect.

WeeChat

Add the DarkWorld server

Use the following commands:

/server add darkworld irc.darkworld.network/6697 -tls
/set irc.server.darkworld.tls_verify on
/set irc.server.darkworld.sasl_mechanism plain
/set irc.server.darkworld.sasl_username "YourAccount"

Replace YourAccount with your registered NickServ account name.

Store the password securely

Store the NickServ password in WeeChat secure data instead of placing it directly in the server configuration:

/secure passphrase YourEncryptionPassphrase
/secure set darkworld_password YourNickServPassword
/set irc.server.darkworld.sasl_password "${sec.data.darkworld_password}"
/save
/connect darkworld

Replace:

• YourEncryptionPassphrase with a strong passphrase used to protect WeeChat secure data.
• YourNickServPassword with your NickServ password.

Do not reuse your NickServ password as the WeeChat secure-data passphrase.

Enter these commands only in WeeChat's command-input area. Never enter them in a channel or private-message window.

Irssi

Add the DarkWorld network with native SASL support:

/NETWORK ADD -sasl_mechanism PLAIN -sasl_username YourAccount -sasl_password YourNickServPassword DarkWorld
/SERVER ADD -auto -tls -tls_verify -network DarkWorld irc.darkworld.network 6697
/SAVE
/CONNECT DarkWorld

Replace:

• YourAccount with your registered NickServ account name.
• YourNickServPassword with your NickServ password.

The -tls option enables TLS. The -tls_verify option enables certificate verification.

Irssi may store the SASL password in its configuration file. Protect the account running Irssi and ensure that other users cannot read the configuration file.

On a shared shell service, follow the provider's approved secure configuration procedure. Do not change file permissions or store credentials in shared locations without authorization.

✅ Verify TLS and SASL

Verify the TLS connection

After connecting, check the server or status window.

Confirm that:

• The server is irc.darkworld.network.
• The port is 6697.
• The connection uses TLS.
• Certificate verification succeeded.
• No certificate warning was displayed.

Some clients display a padlock icon for secure connections. A padlock is helpful, but you should also inspect the connection information in the client's server or status window.

Verify SASL authentication

A successful SASL connection may display a message similar to:

You are now logged in as YourAccount

You can also check your current identity with:

/WHOIS YourNickname

Replace YourNickname with your current IRC nickname.

Look for account information showing that the nickname is logged in to your registered account.

Do not include your password in a WHOIS command.

What successful authentication means

Successful SASL authentication confirms that your IRC connection has logged in to the specified NickServ account.

It does not grant:

• IRC operator access.
• Channel operator access.
• Staff authority.
• Access to another DarkWorld project.
• Permission to bypass network or channel rules.

All access remains subject to the account's existing permissions and DarkWorld IRC policies.

🛠 Troubleshooting

SASL authentication failed

Check the following:

1. The NickServ account is already registered.
2. The SASL username is the registered account name, not necessarily the nickname currently displayed.
3. The password is correct and uses the correct capitalization.
4. The SASL mechanism is set to PLAIN.
5. TLS is enabled.
6. The connection uses port 6697.
7. Certificate verification is enabled and succeeds.
8. There are no accidental spaces before or after the username or password.
9. The account is not suspended, unconfirmed or otherwise restricted.
10. The IRC client supports SASL.

If you recently changed your NickServ password, update the stored SASL password in every IRC client, bot and bouncer that uses the account.

Connection succeeds but SASL does not

The IRC client may be connecting without sending SASL credentials.

Confirm that:

• SASL is enabled for the DarkWorld network entry.
• The login method is set to SASL.
• The username and password are saved under the correct network.
• The client is not using a duplicate DarkWorld server entry.
• The client is not relying on an old NickServ perform command.
• The registered account name is being used as the SASL username.

Remove outdated automatic identification commands after SASL has been configured successfully.

Nickname and account name are different

Your current nickname and registered account name do not always need to be identical.

For example:

Field	Example
Current nickname	DarkUser-Away
Registered account	DarkUser
SASL username	DarkUser

Use the registered account name as the SASL username.

TLS certificate error

Do not bypass the certificate warning.

Confirm:

• Server: irc.darkworld.network
• Port: 6697
• TLS: enabled
• Certificate verification: enabled
• Device date and time: correct
• IRC client: updated
• Operating system: updated

If the error continues, contact DarkWorld IRC support and provide:

• IRC client name and version.
• Operating system.
• Server address.
• Port number.
• Exact certificate error.

Never provide passwords, authentication tokens, private keys or recovery codes.

Password accidentally exposed

A password is exposed if it is posted or stored somewhere unauthorized, including:

• A public IRC channel.
• A private message.
• A support request.
• A staff report.
• A screenshot.
• A public paste.
• A shared configuration file.
• A publicly accessible log.

If your NickServ password is exposed:

1. Do not repeat, quote or copy the exposed password.
2. Change the NickServ password immediately using the password-change procedure documented by DarkWorld IRC Services.
3. Update the saved SASL password in every authorized IRC client, bot and bouncer.
4. Report the exposure through the approved DarkWorld support or security channel.
5. Review connected sessions and unexpected account activity where possible.
6. Change the password of any other account that reused the same password.
7. Remove or restrict access to the exposed content where authorized.

Never reuse your NickServ password for email, websites, shell accounts, bots, staff portals or other services.

🛡 Account and device security

Account security recommendations

• Use a strong and unique NickServ password.
• Store passwords in a reputable password manager.
• Use TLS and SASL on every connection.
• Enable MFA on related email, staff and project accounts wherever supported.
• Never share account credentials.
• Never send passwords through IRC messages.
• Remove obsolete automatic NickServ identification commands.
• Remove unused client and bouncer configurations.
• Report suspected credential exposure immediately.

Device security recommendations

• Keep the operating system updated.
• Keep the IRC client updated.
• Use a supported IRC client.
• Enable automatic screen locking.
• Protect the device with a password, PIN or equivalent authentication.
• Do not allow unauthorized people to use a privileged IRC session.
• Use appropriate anti-malware protection where applicable.
• Encrypt the device storage where supported.
• Back up recovery information securely.
• Avoid using privileged IRC accounts on public or untrusted devices.

👥 Additional requirements for staff and trainees

DarkWorld IRC staff members and trainees must:

• Use TLS for every staff-related IRC connection.
• Use SASL where supported.
• Use an approved and securely configured IRC client.
• Protect staff and Services credentials.
• Report suspected credential exposure immediately.
• Keep privileged access separate from ordinary testing where required.
• Follow the principle of least privilege.
• Never request a user's password.
• Never copy a user's exposed password into a report.
• Follow approved account-recovery and incident-reporting procedures.

Acceptance into staff training does not itself grant staff authority or privileged access.

❓ Getting help

If you cannot configure TLS or SASL, ask for assistance in the official DarkWorld IRC support channel.

When requesting help, provide:

• IRC client name and version.
• Operating system.
• Server address and port.
• The exact error message.
• Whether the problem involves TLS, SASL or both.
• Whether the problem occurs during connection or authentication.

Never provide your password, authentication token, recovery code, private key or password-manager information.

🧭 Next steps

After securing your connection and account, continue with:

• Getting Started
• IRC Client Setup
• Mobile Connection Guide
• Channel Management Tips

References

• mIRC connection and SASL documentation
• mIRC server command documentation
• WeeChat official documentation
• Irssi network and SASL documentation
• Irssi TLS connection documentation
• HexChat official website
• Anope 2.0 to 2.1 upgrade documentation

Part of the DarkWorld Network Wiki Project Maintained by the DarkWorld Wiki Team

DarkWorld Network — Building an Open, Secure, and Collaborative Internet Since 2021

🌍 Connect with Us: | | | | | | File:Telegram.png

Quick Links: 🏠 Home • 💬 DWIRC • 🔗 DWBouncers • 💻 DWShells • 📘 Tutorials • 📈 Stats • 🎮 Games • 🧭 Hosting

💡 Want to contribute? See How to Contribute and help build the DarkWorld knowledge base!

📅 Last Updated: 2026-08-17 • Content licensed under CC-BY-SA 4.0 unless otherwise noted.