Compatibility
Minecraft: Java Edition
26.1.x
1.21.x
1.20.x
Platforms
Links
Tags
Creators
Details
Licensed MIT
Published 2 days ago
LightAuth
Lightweight auth plugin for Paper/Spigot servers.
Players register and log in with passwords hashed using BCrypt. Optional 2FA with any TOTP app (Google Authenticator, Aegis, etc).
All database operations run async on SQLite — no TPS impact.
What it does
- Password registration and login with BCrypt hashing
- Optional TOTP 2FA
- IP-based session caching with configurable timeout
- Unauthenticated players are frozen, blinded, and hidden
- Inventory and interaction protection until login
Other stuff
- Fully async SQLite storage
- Migration tool for moving from LoginSecurity
- Configurable messages and timeouts
Commands & Permissions
| Command | Aliases | Permission | Description |
|---|---|---|---|
/login <pass/code> |
/l |
None | Authenticate with your password or 2FA code. |
/register <pass> |
/r |
None | Create a new account and set your password. |
/2fa <setup/confirm> |
/otp |
None | Enable or manage Two-Factor Authentication. |
/changepassword |
/cp, /pass |
None | Change your current account password. |
/lightauth |
/la |
lightauth.admin |
Administrative commands (Reload, Migration). |


