?
Host a serverModrinth App
Sign in
ModsResource PacksData PacksShadersModpacksPluginsServers
Settings
ULTIMATE AUTH

ULTIMATE AUTH

Next-gen authentication plugin with Bedrock/Floodgate auto-auth, fluid smooth camera, brute-force defense, Discord alerts, and HikariCP storage.

419downloads
1follower
419downloads
1follower

Compatibility

Minecraft: Java Edition

26.3
26.2
26.1.x
1.21.x
1.20.x

Platforms

Links

Donate

Tags

Creators

Details

Licensed ARR
Published 11 months ago
Updated 4 days ago

🔐 UltimateAuth

The Flagship Authentication & Account Security Engine for Modern Minecraft Servers

Folia Supported Paper / Purpur Bedrock Ready Zero-Lag Async

UltimateAuth is a commercial-grade, high-performance authentication and account protection system engineered from the ground up for modern Minecraft servers. Say goodbye to bloated, abandoned legacy plugins that crash modern server cores or snap players' screens. UltimateAuth delivers fluid camera aiming, native Bedrock cross-play auto-login, enterprise brute-force lockout, and multi-database support with zero tick delay.

⚡ Why Upgrade to UltimateAuth?

Feature UltimateAuth 3.4.0 AuthMe Reloaded SimpleLogin OpeNLogin
Bedrock / Floodgate Auto-Auth ✅ Instant Built-in ⚠️ Broken / Clunky ❌ None ❌ None
Zero-Jitter Smooth Camera ✅ 144Hz+ Fluid Look ❌ Snapping / Jerky ❌ Screen Jitter ❌ Jittery
Folia Multi-Threaded Support ✅ Native & Tested ❌ Crashes / Deadlocks ⚠️ Unstable ❌ No
Self-Healing Config Migration ✅ 100% Automatic ❌ Manual File Edits ❌ Manual ❌ No
Discord Security Webhooks ✅ Async & Built-in ❌ Third-party Bridge ❌ None ❌ None
Database Connection Pooling ✅ HikariCP High-Speed ⚠️ Outdated Driver ⚠️ Basic SQLite ⚠️ Basic
Adaptive Brute-Force Lockout ✅ IP + UUID Defense ⚠️ Basic IP Lock ❌ None ❌ None

🌟 Key Features

📱 1. Native Bedrock & Floodgate Auto-Authentication

Cross-play servers powered by GeyserMC & Floodgate no longer need to force mobile and console players to wrestle with on-screen virtual keyboards. UltimateAuth automatically detects authenticated Bedrock sessions and grants instant, secure access.

🎥 2. Zero-Jitter Fluid Camera Aiming

Traditional auth plugins cancel every move packet, causing violent screen shaking and mouse stutter when unauthenticated players look around. UltimateAuth's movement freeze engine strictly locks X/Y/Z translation while granting 100% fluid, 144Hz/240Hz camera rotation (yaw & pitch).

🛡️ 3. Enterprise Account & DDoS Defense

  • Adaptive Brute-Force Engine: Automatically locks out malicious IPs and compromised UUIDs after consecutive failed attempts.
  • BCrypt Password Hashing: Configurable cost factors (4-15) protecting user credentials against dictionary and rainbow table attacks.
  • Password Policy Enforcement: Blocks short, trivial, or username-matching passwords.
  • Connection Security Burst Guard: Prevents bot-spam join floods at the network level.

🔔 4. Real-Time Discord Security Alerts

Instantly stream critical security telemetry directly to your staff Discord channel:

  • Admin logins & operator session starts
  • Brute-force account lockouts with IP & remaining timeout
  • Admin password resets and unregistrations

💾 5. High-Throughput Multi-Storage

Seamlessly scale from a single survival server to a multi-realm network:

  • SQLite: Zero setup, self-contained local storage powered by HikariCP.
  • MySQL / MariaDB: Network-wide centralized authentication with connection pooling and SSL encryption.

⌨️ Commands & Permissions

Player Commands

Command Permission Description
/register <password> <password> ultimateauth.auth.use Register a new secure account
/login <password> ultimateauth.auth.use Authenticate into your session
/changepassword <old> <new> ultimateauth.auth.use Safely update your password
/logout ultimateauth.auth.use Terminate your active session

Staff & Admin Commands

Command Permission Description
/auth info <player> ultimateauth.auth.admin View account details, last login, and brute-force status
/auth forcelogin <player> ultimateauth.auth.admin Force-authenticate an online player
/auth unlock <player> ultimateauth.auth.admin Reset brute-force lockouts and failed attempts
/auth changepassword <player> <pass> ultimateauth.auth.admin Administratively update a player's password
/auth reset <player> ultimateauth.auth.admin Invalidate session and force immediate re-authentication
/auth unregister <player> ultimateauth.auth.admin Permanently wipe an account from the database
/auth reload ultimateauth.auth.admin Hot-reload all configurations without server restart

⚙️ Configuration Showcase

Click to expand default config.yml 
# Connection-level anti-bot & account defense.
security:
  connection:
    enabled: true
    global-max-per-second: 80
    ip-max-attempts: 8
    ip-window: 10s
    kick-message: "<red><bold>Slow down</bold></red><gray> • Too many connection attempts, retry in a few seconds.</gray>"

  # Progressive brute-force protection and lockout
  brute-force:
    max-attempts: 5
    lockout-minutes: 15

  # Real-time Discord security alerts
  webhook:
    enabled: false
    url: ""

# Authentication module.
auth:
  enabled: true
  login-timeout: 120
  chat-reminder-interval: 10s
  bcrypt-cost: 12

  # Bedrock & Floodgate cross-play integration (GeyserMC)
  bedrock:
    auto-auth: true
    prefix: "."

  # Password strength and credential safety rules
  password-policy:
    min-length: 6
    disallow-username: true
    disallow-common: true

  # Visual privacy and spawn protection
  visuals:
    blindness: true

  session-enabled: true
  session-duration: 30m

  database:
    type: sqlite # mysql, mariadb, sqlite
    pool-size: 10

📥 Installation

  1. Download UltimateAuth-3.4.0.jar.
  2. Place it into your server's plugins/ directory.
  3. Restart or start your server (Paper, Purpur, Spigot, or Folia).
  4. (Optional) Configure config.yml if connecting to a centralized MySQL or MariaDB database or enabling Discord webhooks.