Simple Login

Description

Simple Login is a lightweight and secure authentication plugin/mod designed for Minecraft servers, supporting versions 1.17–26.x. It provides a login and registration system where players must register using /register <password> <password> and log in using /login <password> before interacting with the server. Until authentication is completed, players are restricted from moving, interacting with their inventory, breaking or placing blocks, and performing other gameplay actions, ensuring protection against unauthorized access.

The plugin uses SQLite for data storage, with passwords hashed using BCrypt for secure account handling. An automatic update checker is included to notify server owners about new releases.

Security & Authentication Features

• Optional TOTP-based two-factor authentication (Google Authenticator support)
• Global toggle for 2FA
• /2faconfirm <6-digit code> required to confirm and complete 2FA setup
• Session system with trusted IP support to reduce repeated authenticator prompts
• Minimum password length requirement of 8 characters
• Pre-login protection system with full restriction handling

Account Management

• Account deletion requires confirmation via /delacc confirm <password|6-digit code>
• Deletion requests are time-limited and can expire
• Pending deletion requests can be cancelled using /delacc cancel
• /delacc is restricted until the player is logged in
• Detailed error handling for invalid codes, passwords, and expired requests

Admin & Utility Commands

• /changepass <player> <newpass> for OPs (console support included with permission control)
• /slreload reloads configuration files
• /abortsession forces session termination and requires re-login
• Session management system with trusted IP handling

Configuration & Localization

All messages are configurable via config.yml.

• cancellation messages
• timeout handling
• invalid password or 2FA code responses
• confirmation prompts
• usage instructions

Requirements

• ProtocolLib _(soft dependency; required to hide user passwords in logs)_
• Java 17 or higher required

Commands (unmentioned)

• Enables 2FA for sender

/enable2fa

• Disables 2FA for sender

/disable2fa