JPAuth

Login and registration for offline-mode Paper servers. Players with a paid Minecraft account and Bedrock players can skip the password, and everyone else gets a login that's hard to abuse.

Part of JP Plugins, but it works on its own.

Features

Logging in

• /register and /login in chat or in a login window (dialog)
• Sessions per IP, so players don't log in again on every short reconnect
• Password recovery by e-mail (/email, /recover)

Premium players

• Log in through Mojang with no password
• New premium players are registered automatically
• Works with any launcher signed in with a Microsoft account, including the Modrinth launcher
• Each premium account remembers its Mojang account, so a name can't be taken over after a Mojang name change

Bedrock players

• Registered and logged in automatically with Geyser and Floodgate

Protection

• Account locks after wrong passwords
• Captcha and anti-bot checks
• Blocks a second connection with the same name, and look-alike names in other capitals
• Warns you at startup about operators without an account

For server owners

• Import from AuthMe: players keep their passwords (/auth import authme)
• SQLite or MySQL
• Optional auth world, spawn points per stage and a Discord webhook
• Messages in English, Spanish, Portuguese, French and German, or add your own language
• API and events for other plugins

Requirements

• Paper 26.1 or newer (Java 25)

Optional

• PacketEvents: needed for premium login on offline-mode servers
• Floodgate: Bedrock players log in automatically

Installation

1. Put the jar in your server's plugins folder.
2. Restart the server. plugins/JPAuth/ is created with the config and messages.
3. Change what you want in the files, then use /auth reload or restart.

Type /jp as an operator to see every JP plugin you have installed, its version and which optional plugins it found.

Commands

• /register <password> <confirm> (also /reg): Register your account
• /login <password> (also /l): Login to your account
• /logout: Logout from your account
• /changepassword <oldPassword> <newPassword> (also /changepw, /cpw): Change your password
• /premium [confirm]: Turn premium auto-login on or off (Mojang verifies you on every join)
• /captcha <code>: Solve captcha verification
• /email <add <email> <email>|verify <code>|show|remove> (also /mail): Add, check or remove your recovery e-mail
• /recover or /recover <code> <new password> <new password> (also /forgotpassword): Reset a forgotten password with your recovery e-mail
• /auth <subcommand>: Admin authentication commands
• /authfreeze <player> (also /afreeze): Freeze or unfreeze a player (login system)

Permissions

• jpauth.admin (operators): Access to JPAuth admin commands
• jpauth.bypass.antibot (nobody): Bypass antibot checks
• jpauth.bypass.captcha (nobody): Bypass captcha requirement
• jpauth.bypass.accountlimit (nobody): Register more accounts per IP than security.max-accounts-per-ip

Support

Full docs, the default config and setup guides are on the JPAuth page of the JP Plugins website. Questions, bugs or ideas? Join the JP Plugins Discord.

License

JPAuth is free to use on any server, including servers that make money, but it is not open source. Don't reupload, sell or share modified copies of it. The full terms are in LICENSE.txt inside the jar.