Discord Search Engine Indexing: Public Server Messages Go on the Web From Mid-December, and the Settings to Check Now
Discord will publish a web page for every Discoverable Server on November 16, 2026, and messages from public channels can appear in web search from mid-December. Here is what is confirmed, who is affected and which settings to change first.
Where Worldwide
On this page 8 sections
From Monday, November 16, 2026, Discord will publish a public web page for every Discoverable Server, and from mid-December it will start showing messages from those servers' public channels on the web and in web search. If your business runs a public Discord community for customers, players or users, things your staff and members post there could soon be read by anyone, with no Discord account or invite needed.
Discord announced the change on Tuesday, October 27, 2026. Below is what Discord has confirmed, what it has not said, and the settings to check before those dates arrive.
What Discord is changing
Discord's announcement describes two kinds of content that will appear on a new public page for each Discoverable Server, called a Server Web Page:
- Channel Summaries, from November 16, 2026: automated overviews of active conversations, built from broader channel topics. Admins can change which channels feed them, edit them or turn them off.
- Channel Messages, from mid-December 2026: messages from public channels that, in Discord's words, "may show on Server Web Pages and in web search." Discord says the rollout is gradual, so the first messages may take a few weeks to appear.
If an admin has not set up a Server Web Page by November 16, Discord will publish a default one using the server's profile details.
Which Discord servers are affected
Only Discoverable Servers. Discord says these are servers listed in Server Discovery, which requires at least 1,000 members, a server at least eight weeks old, and meeting Discord's activity and safety requirements. Discord puts the number at more than 63,000.
Discord says private servers, direct messages and group DMs stay private and are not included.
That changes some of the advice going around. A company's internal team server with a few dozen employees can't be Discoverable, so this change doesn't touch it. The servers that are affected are the large public ones: a software company's user community, a game studio's player server, a brand's fan server, a creator's members' hub.
What is confirmed and what is not
| Point | Status |
|---|---|
| Server Web Pages go live for every Discoverable Server on November 16, 2026 | Confirmed by Discord |
| Messages start appearing in mid-December 2026, gradually | Confirmed by Discord, no exact day given |
| Messages sent before mid-December 2026 are not included | Confirmed by Discord |
| Usernames and avatars are not shown with messages or summaries | Confirmed by Discord |
| Teen accounts are excluded and cannot turn the feature on | Confirmed by Discord |
| Member setting is off by default in the EU, UK, Canada, Brazil, Australia and South Korea, and on everywhere else, including the US | Confirmed by Discord |
| Messages posted while sharing was on stay up unless the person deletes them from Discord | Confirmed by Discord |
| Which search engines index the pages, and how fast deleted messages drop out of their results | Not stated by Discord |
| Whether attachments, images, links or threads are included | Not stated by Discord |
Some coverage calls this a permanent record. Discord's own wording is narrower: messages "stay up unless you delete them from Discord." Discord has not said what happens to copies that search engines have already picked up, so plan as if anything published may stay findable for a while.
Why it matters for a company Discord server
If your company runs or moderates a Discoverable Server, the risk comes from everyday posts, not from a hacker.
- Support and help channels. Customers paste order numbers, email addresses and screenshots. Staff reply with workarounds, policy details and the names of internal systems. Usernames are hidden, but the text alone can still identify a person or an account.
- Staff speaking for the company. Moderators and community managers are your public voice. Once their replies can be searched, an offhand remark about an outage, a refund or an upcoming feature is easy for a reporter, a competitor or an upset customer to find.
- Technical details. Error logs, config snippets, hostnames and IP addresses get pasted while people troubleshoot, and attackers search for exactly that kind of thing. It is the same discipline as checking what your website shows the public, covered in Your Website Is Live. Can Anyone Find It, and Is It Locked?, and the same lesson as the ChatGPT share link attack: a sharing feature changes who can read what you wrote.
There is a real upside. Discord presents this as a way for communities to be found, and a business that wants its community to show up in search may decide it is worth it. The point is to decide on purpose, channel by channel, rather than let the defaults decide for you.
How to stop Discord messages showing in search: admin checklist
Do this before November 16:
- Check whether your server is in Server Discovery. If it isn't, this change does not apply to it.
- Open Server Settings > Web Presence. Discord says admins can pick which channels take part or opt every channel out. If you change nothing, public channels stay on.
- Turn off sensitive channels. Support, help, billing, bug reports and anywhere people paste personal or technical details.
- Review Channel Summaries separately. Discord treats them as separate from Channel Messages. Choose their source channels or switch them off.
- Set up the Server Web Page yourself so the auto-generated default isn't what the public sees on November 16.
- If you want no web page at all, Discord says you can switch back to being a Community Server, which takes the server out of Discovery.
- Tell members. Discord says channels whose content may appear on the web will be labeled. Post an announcement explaining which channels are labeled and how members can opt out.
- Brief staff and moderators before mid-December: treat anything posted in a labeled channel as published.
Discord privacy settings for members and staff
Each person controls their own messages under User Settings > Data and Privacy, using the switch labeled "Show my message content from Discoverable channels on web pages." One switch covers every Discoverable Server they belong to.
Three things to know:
- In the US and most countries, the switch is on by default.
- Turning it off covers only messages sent after you turn it off. Anything posted while it was on stays up unless you delete it.
- The switch covers your messages. Channel Summaries are controlled by server admins.
For employees who post in public communities from a personal account, the simple rule is to turn the switch off unless they want their posts searchable.
Discord search engine indexing questions people are asking
Will my Discord DMs show up on Google?
No. Discord says direct messages and group DMs stay private and are not part of this.
Will old Discord messages be indexed?
No. Discord says messages sent before mid-December 2026 are not included, whatever your settings.
Does this affect private Discord servers?
No. Only Discoverable Servers, which need at least 1,000 members and must meet Discord's other requirements.
Will my username show next to my messages?
No. Discord says usernames and avatars won't be shown. The message text can still identify you if it includes your name, email or company.
Can I remove a message after it appears on the web?
You can delete it from Discord, and Discord says that takes it down. Discord has not said how quickly search engines drop copies they have already picked up.
What is the exact date in December?
Discord has only said mid-December 2026, with a gradual rollout that may take a few weeks.
Is Discord web indexing on by default?
For admins, yes: public channels stay on unless you change them. For members, it is on by default except in the EU, UK, Canada, Brazil, Australia and South Korea.
The bigger lesson
Platforms change their defaults, and new defaults usually mean more sharing. A chat that felt like a closed room can become a web page with a few weeks' notice. Treat every public community channel as published content, set clear rules for what staff post there, and recheck platform settings every time the terms change.
For help locking down the platforms and systems your business depends on, see security hardening or request a quote.
Get security alerts like this by email, with our free checklist, at /security-alerts.
Sources: Discord: Making Content from Discoverable Servers Easier to Discover; BleepingComputer: Discord to let search engines index public server messages.
Have a question about this article?
Ask it here and we will answer you directly by email. Questions are private, never posted.
Security alerts by email
Hear about the next one first.
When attackers start using a flaw in software businesses run on, we email what it is, whether it touches you and what to do that week, with a round-up of our latest security writing. Free, one-click unsubscribe. You get the checklist straight away: 12 things to secure this week.
Want a result like this?
Security alerts, breaches and the technology a business runs on: what happened, who it affects and what to do.
Get a Tech QuoteKeep reading
Rosstat Cyberattack: Russia's Statistics Agency Is Still Restoring Systems, What Is Confirmed and What Businesses Should Check
Rosstat says it is still restoring systems after cyberattacks from October 29 to November 1, 2026. Hackers cla...
Ransomware Business Continuity: Why Backups Alone Won't Keep Your Company Running, and What to Do This Week
Backups can bring systems back, but they do not keep work moving during the outage. Here is what Japan's IPA l...
Sshole SSH Vulnerability (CVE-2026-123158): Exploit Attempts Hit Honeypots, Which Alpine Linux Servers Are Exposed, and the Fixed Versions to Install
An OpenSSH flaw called Sshole can let attackers skip the password on some Alpine Linux servers, and honeypots...