Skip to content

Safety

Nova is a social platform, so the same common-sense rules apply as anywhere else: protect your account, be careful what you share, and only use the official platform.

Account safety

  • Use a unique password for Nova. Do not reuse your Roblox password.
  • Turn on two-factor authentication if the platform offers it.
  • Never share your password, session cookies, or recovery codes.
  • Be careful with "free Robux", "account recovery", and "staff" messages. Real staff will not ask for your password.
  • Sign out on shared computers.

Only use the official platform

The official platform is https://www.novalabs.top.

There is no public source build and no official GitHub binary download. Nova is closed source. Be very suspicious of:

  • "Nova client" downloads from random sites.
  • Discord DMs offering installers, executors, or account boosts.
  • Pages that ask you to sign in with your Roblox account.
  • Browser extensions that promise extra features.

If a site asks for your Roblox credentials, it is not Nova.

What you share in games

Places can include chat, user-generated content, and links. Do not share:

  • Your real name, address, school, or phone number.
  • Passwords or account recovery information.
  • Payment details.
  • Private photos or documents.

Use the platform's report and block tools when someone behaves abusively. Keep evidence (screenshots, place links, timestamps) if you report a serious issue.

Downloads and files

Places may let creators publish models, images, or sounds, but you should not download or run random executables from a game. Nova runs in the browser today; a desktop launcher is planned and will be distributed officially when it exists.

Age verification and privacy

Nova does not require age verification, face scans, or government ID uploads. If a page claiming to be Nova asks for a face scan or ID, close it and report it through the official platform.

Reporting security issues

If you find a security problem in the platform, report it privately through the official support/security channel. Do not post exploit details, private user data, or step-by-step abuse instructions in public docs or community spaces.