MCrosAuthRegister

MCrosAuthRegister

MCrosAuthRegister protects a server from unauthenticated account use. New arrivals must register or log in before they can move, interact with blocks or entities, use inventories, pick up or drop items, fight, or run commands outside the configured pre-login allow-list. This closes the gap between a player joining the server and the server confirming that the player controls the account.

Player account data is saved persistently. Administrators can set password length and character rules, login timeout and attempt limits, and whether chat is blocked before authentication. Output supports English and Russian.

Player commands

These commands require the corresponding permission, which is enabled by default for players.

• /register <password> <repeat password> or /reg <password> <repeat password> — creates a new account and confirms the password before saving it.
• /login <password> or /l <password> — authenticates an existing account and unlocks the player's session.
• /my_password edit <old password> <new password> <repeat new password> or /mypassword edit ... — changes the player's password after verifying the current one. Requires mcrosauth.login.

Administrator access and commands

• /mcros authregister password settings min_lenght <number> — sets the minimum accepted password length. min_length is accepted as an alternate spelling.
• /mcros authregister password settings max_lenght <number> — sets the maximum accepted password length. max_length is accepted as an alternate spelling.
• /mcros authregister password settings symbols list — displays the currently allowed password characters.
• /mcros authregister password settings symbols only_letter — permits letters only.
• /mcros authregister password settings symbols only_numbers — permits digits only.
• /mcros authregister password settings symbols can_space <true|false> — allows or forbids spaces in passwords.
• /mcros authregister password settings symbols custom_list <characters> — defines a custom set of allowed characters.

The /mcros authregister route also requires API access: operator status, mcrosapi.admin, or an entry in the API allow-list. Password administration additionally requires operator status or mcrosauth.admin. The mcrosauth.bypass permission can exempt an administrator from the authentication requirement. These controls help servers reduce unauthorized access, enforce password rules consistently and keep gameplay locked until a player has authenticated.