A lightweight authentication mod for offline Minecraft servers. Protect your server with password-based login/registration, no client-side mod required.
/register and /login before they can interact with the world./login attempts.config/basicauth-common.toml.| Command | Description |
|---|---|
/register <password> <confirmPassword> |
Create an account and log in. |
/login <password> |
Log in to an existing account. |
/changepassword <old> <new> |
Change your password. |
/logout |
Disconnect and clear your session. |
/unregister <password> |
Delete your own account. |
/basicauth reset <player> |
(Op) Reset a player's password to a random code. |
/basicauth unregister <player> |
(Op) Delete a player's account. |
/basicauth accounts |
(Op) List all registered accounts with their online status. |
All settings are available in-game via Mods → BasicAuth → Config, or by editing config/basicauth-common.toml:
| Setting | Default | Description |
|---|---|---|
loginTimeoutSeconds |
60 | Time before an unauthenticated player is kicked. |
minPasswordLength / maxPasswordLength |
3 / 64 | Allowed password length. |
maxFailedAttempts |
5 | Failed /login attempts before a kick. |
gracePeriodSeconds |
3600 | Reconnect window after an unexpected disconnect. |
waitingAreaEnabled |
false | Teleport unauthenticated players to a fixed location. |
waitingAreaDimension / X / Y / Z |
— | Where the waiting area is. |