Description:

Simple Login is a lightweight mod that adds a secure login and registration system to your server. Players must register using the /register <password> <password> command and log in with /login <password>. Until they register and log in, players are restricted from moving, interacting with their inventory, and breaking or placing blocks. Additionally, they will receive periodic reminders until they complete the login process.

Server administrators can configure message intervals, login timeouts, and error messages via the config.yml. The plugin also allows players to delete their accounts using /delacc, and server OPs can reset players' passwords with /changepass <player> <newpass>.

This plugin is ideal for ensuring that only authenticated players can interact with the server, enhancing security and keeping gameplay organized.

There are no external dependencies. Java 21 or higher is required. 

Commands:

• Registers the player with a password.

/register <password> <password>

• Logs the player in.

/login <password>

• Deletes the player's account and password.

/delacc

• (OP only) Change the password for another player.

/changepass <player> <newpass>

• Reload config.yml

/slreload

Description

Simple Login is a lightweight and secure authentication plugin/mod designed for Minecraft servers, supporting versions 1.17–26.x. It provides a login and registration system where players must register using /register <password> <password> and log in using /login <password> before interacting with the server. Until authentication is completed, players are restricted from moving, interacting with their inventory, breaking or placing blocks, and performing other gameplay actions, ensuring protection against unauthorized access.

The plugin uses SQLite for data storage, with passwords hashed using BCrypt for secure account handling. An automatic update checker is included to notify server owners about new releases.

Security & Authentication Features

• Optional TOTP-based two-factor authentication (Google Authenticator support)
• Global toggle for 2FA
• /2faconfirm <6-digit code> required to confirm and complete 2FA setup
• Session system with trusted IP support to reduce repeated authenticator prompts
• Minimum password length requirement of 8 characters
• Pre-login protection system with full restriction handling

Account Management

• Account deletion requires confirmation via /delacc confirm <password|6-digit code>
• Deletion requests are time-limited and can expire
• Pending deletion requests can be cancelled using /delacc cancel
• /delacc is restricted until the player is logged in
• Detailed error handling for invalid codes, passwords, and expired requests

Admin & Utility Commands

• /changepass <player> <newpass> for OPs (console support included with permission control)
• /slreload reloads configuration files
• /abortsession forces session termination and requires re-login
• Session management system with trusted IP handling

Configuration & Localization

All messages are configurable via config.yml.

• cancellation messages
• timeout handling
• invalid password or 2FA code responses
• confirmation prompts
• usage instructions

Requirements

• ProtocolLib (soft dependency; required to hide user passwords in logs)
• Java 17 or higher required

Commands (unmentioned)

• Enables 2FA for sender

/enable2fa

• Disables 2FA for sender

/disable2fa