GateKeeper

Protect your server with a secret key system. Instead of a traditional whitelist, GateKeeper requires players to enter a password when joining from an unrecognized IP — keeping unwanted visitors out without banning accounts.

How It Works

• When a player joins from an unknown IP, they are prompted to enter the secret key in chat
• Their input is hidden from other players and they are frozen in place until authenticated
• Once authenticated, their IP is trusted for a configurable period (default: 30 days)
• If they return on the same IP within that period, they get in with no prompt
• If they join from a new IP, they must authenticate again

Failed Attempts

• Players get a configurable number of attempts (default: 5)
• Exceeding the limit results in an IP ban — the player account itself is never banned
• Ban duration is configurable, or set to permanent

Features

• 🔑 Secret key authentication on join
• 🌐 Per-player trusted IP storage with expiry
• 🚫 IP ban on too many failed attempts
• ⛏️ Mining Fatigue 255 applied while unauthenticated
• 🔒 Movement and commands blocked until authenticated
• ⚙️ Fully configurable via config.yml

Configuration

secret-key: "changeme123"
max-attempts: 5
ban-duration-minutes: 60       # 0 = permanent
trusted-ip-expiry-days: 30     # 0 = never expire, 7 = one week
kick-message: "Too many failed attempts. Your IP has been banned."
prompt-message: "§eEnter the server secret key in chat:"
wrong-message: "§cWrong key. Attempts remaining: %attempts%"
success-message: "§aAuthenticated! Welcome."

Requirements

• Paper / Spigot 1.20+
• Java 17

Made by flintify