?
Host a serverModrinth App
ModsResource PacksData PacksShadersModpacksPluginsServers
Settings
AuthSystem

AuthSystem

The plugin allows secure player login and registration on a Minecraft server, protecting accounts from unauthorized access.

232downloads
0followers
232downloads
0followers

Compatibility

Minecraft: Java Edition

26.3
26.2
26.1.x
1.21.x

Platforms

Links

Join Discord server

Tags

Creators

Details

Licensed ARR
Published 10 months ago
Updated 4 days ago

🔐 AuthSystem

A lightweight, secure login & register plugin for Paper and Folia, from 1.21 to 26.x+.

AuthSystem protects player accounts on your server (great for offline-mode / cracked servers). Every player has to /register once and then /login each time they join. Until they log in, they can't move, chat, run commands or touch the world.

âœĻ Features

  • ✅ Paper & Folia: fully thread-safe, built on the region/entity schedulers
  • ✅ Minecraft 1.21 – 26.x+: one jar for every version
  • 🔒 Secure passwords: PBKDF2-SHA256 hashing with a random salt (old accounts are upgraded automatically)
  • ⚡ No lag: hashing and saving run off the main thread
  • 🧊 Full lock until login: no moving, chat, commands, blocks, items, inventory, PvP or damage
  • ⏱ïļ Login timeout with a kick and repeating reminders showing the time left
  • ðŸšŦ Brute-force protection: kick after X wrong passwords
  • 🛠ïļ Admin commands: reset accounts and change passwords, from in-game or the console
  • 📁 Simple storage: everything lives in players.yml, with no database needed
  • ðŸŠķ Lightweight: a single small jar with no dependencies

📜 Commands

Command Description
/register <password> <password> Create an account (alias: /reg)
/login <password> Log in (alias: /l)
/changepassword <old> <new> <new> Change your password (aliases: /changepass, /cp)
/verify reload Reload config and players.yml
/verify reset <player> Delete a player's account
/verify changepass <player> <password> Set a new password for a player

🔑 Permissions

Permission Description Default
verify.admin Access to /verify admin commands OP

⚙ïļ Configuration

# Time in seconds that a player has to log in or register after joining the server.
login-timeout: 120
enable-kick-on-timeout: true

# How often (in seconds) the reminder is repeated. 0 = only once.
reminder-interval: 15

min-password-length: 4
max-password-length: 64

messages:
  timeout-kick: "You didn't log in within the time limit!"
  login-reminder: "Type &e/login <password> &fto log in! (You have {time} seconds left)"
  register-reminder: "Type &e/register <password> <password> &fto create an account! (You have {time} seconds left)"

login-attempts:
  enabled: true
  max-attempts: 5
  reset-on-success: true
  kick-message: "Too many wrong password attempts! Try again later."

Color codes with & are supported.

ðŸ“Ķ Installation

  1. Download the jar and put it in your plugins/ folder.
  2. Start the server (Paper or Folia, 1.21+). Java 21 or newer is required.
  3. Edit plugins/AuthSystem/config.yml if you want, then run /verify reload.

Updating from 1.0? Drop in the new jar. Existing accounts and the config keep working, and passwords are upgraded to the new hashing on the player's next login.

💎 Support

Found a bug or have an idea? Leave a comment or open an issue. Feedback is welcome!