Skip to content

Allow anonymous analytics?

Our cookieless analytics show us which features get used and store nothing on your device. We never sell your data or use it for advertising.

Privacy choices

Choose what ModDex may collect. You can change this anytime from Privacy choices in the footer.

Read the full privacy policy

Strictly necessary Required for the site to work: login sessions, security tokens, and abuse prevention. Always on and cannot be disabled. Always on
Analytics Cookieless analytics through PostHog's EU servers, used only to see which features get used. Nothing is stored on your device, and the anonymous visitor ID resets every day. Needs your consent because usage data goes to a third party. Never used for advertising or profiling. Off by default in the EU and UK.

OperatorLogin

Quick rating

Community listing page, reviews may not be monitored by the author.

Report a bug to the author How listings work Are you the author?

OperatorLogin

By Heypers

No reviews yet

🔑 OperatorLogin is a server-side authentication mod/plugin.

Mod Loaders
Minecraft
Shockbyte server hosting: 35% off your first server with code MODDEX35 (opens in a new tab)

About

Description

OperatorLogin

OperatorLogin is a server-side authentication mod & plugin. It protects configured players with /register <password> <password> and /login <password> before they can chat, run other commands, interact with blocks, or attack entities.

Current target

  • Loader: NeoForge
  • Minecraft: 1.21.1

Security notes

  • Passwords are stored in config/operatorlogin-passwords.properties as salted PBKDF2-HMAC-SHA256 hashes.
  • Legacy plain-text and old SHA-256 hashes are migrated to PBKDF2 after a successful login.
  • Unauthenticated players can only use /login and /register.
  • Login attempts are rate-limited with a temporary lockout.
  • New passwords must satisfy the configured minimum length and cannot be blank or equal to the player name.

Configuration

The mod creates config/operatorlogin.properties on first run.

Option Default Description
authOnlyOperators true If true, only operators must authenticate. Set to false to protect every player.
kickTimeoutSeconds 60 How long an unauthenticated player may stay connected.
minPasswordLength 8 Minimum accepted password length.
maxLoginAttempts 5 Failed attempts before lockout.
lockoutSeconds 60 Lockout duration after too many failed attempts.