Build and Defend Your Raft Account safety
Why unknown pastes, keyloggers, and fake code sites cost more than scrap.
Account safety is the only scripts guide this wiki can honestly write for Build and Defend Your Raft. The game is live Roblox PvP (max 18) from Raft Pirates, released 28 July 2026. As of September 2026 there is no dedicated public script listing for this exact title. That vacuum is catnip for malware. People search auto collect, inf scrap, and auto raid, then paste whatever loadstring a stranger hosted. This page explains why we will not host those pastes, what they actually steal, and where to play instead. Start at the scripts hub, learn the real loop on getting started, and keep official URLs on the links hub.
What an executor is asking for
An executor is extra software that injects into the Roblox client. To “give you infinite scrap” it needs enough access to read memory, hook network calls, or both. The same access can read cookies, session tokens, and whatever you type next. You cannot audit a random paste from a screenshot. You cannot audit a “key system” that opens five browser tabs.
If the pitch is “undetected on this new raft game,” remember the game has Saturday patches and live PvP. Detection is not a sticker a YouTuber prints.
Never paste unknown loadstrings
A loadstring from the internet is remote code on your machine. Typical tells:
- A GitHub raw link or pastebin you did not create
- A Discord file from an unverified server (this wiki does not even have a confirmed invite URL)
- A “get key” page that wants logins, surveys, or a downloaded .exe
- A promise to spawn Meet Frank, skip the Crafting Table, or auto-raid while you sleep
Do not type that string into anything. Do not “just test it on an alt” if you reuse a password. Do not let a friend remote-desktop “to install the GUI.”
Keyloggers and fake code sites
This game has a real Shop redeem field. As of 31 August 2026 there were no working codes. Phishers love that gap. They build sites that look like a codes list, then ask you to log in with Roblox to “verify.” Roblox did not need that. Raft Pirates did not need that. Close the tab.
Other lures:
- “Free 500 scrap pack” that is not the 499 Robux Shop bundle
- “Community Server” invites that do not match in-game text
- Overlays that ask you to disable antivirus to run the harpoon macro
Follow @valtkins only as a Shop-printed social crumb, and still never give it a password. Redeem only inside the client.
Why this wiki will not host unverified executors
Because we cannot verify them. Because PvP means cheating hurts other players on a max-18 server. Because Saturday patches would break a paste anyway. Because a fan wiki that ships malware in a code block is worse than an empty scripts section. We will describe search demand, warn, and stop. If a listing appears later, the scripts hub can mention that it exists — still without a paste.
We also will not invent YouTube IDs to “prove” a script. Fake IDs are a policy failure. Real ones would still not make the paste safe.
What to do if you already ran something
- Change your Roblox password on a device you trust.
- Sign out other sessions if Roblox shows them.
- Remove the executor and any “DLL” it dropped, or ask a competent person offline — not a second random Discord.
- Assume items “granted” by the tool can be rolled back.
- Play clean. The harpoon still works. The Crew button still works. Getting started is still the loop.
If you paid someone Robux for a GUI, treat that as a lesson, not a warranty.
Play the tools that shipped
Harpoon. Crafting Table. Crew. Timer. Gather objectives. Free Reward cannon. Shop packs at 49 / 249 / 499 Robux. Saturday notes on the Roblox page. Those are the supported automation, if you can call a cannon automation. They will not steal your cookie.
If scrap is slow, gather with a teammate or buy a pack. If raids are hard, name a sitter. If you want codes, wait for a real string. If you want Frank, play and check badges. None of that requires a loadstring.
Safety is not a vibe. It is refusing remote code from people who do not love your account. This wiki will stay boring on purpose. Use the scripts hub as an empty catalog, use the links hub for official URLs, and keep unknown pastes off the clipboard. Your raft can be rebuilt. Your Roblox session is harder to rebuild after a cookie theft.
Frequently Asked Questions
Quick answers to the most common raft, raid, and code questions.
Can I test a script on an alt?
Not a good plan if you share a password, email, or device. Executors can still steal cookies. Skip the paste.
Why will this wiki not host executors?
We cannot verify them, they risk bans and theft, and this title had no dedicated public listing as of September 2026.
A site wants my Roblox login to claim codes.
Phishing. Redeem only in the in-game Shop field. See the links hub for official pages.
What if I already pasted a loadstring?
Change your password, review sessions, remove the executor, and return to getting started on a clean client.