# 🛡️ KatIPAuth (KIA)
**KatIPAuth** is a Paper plugin for **Minecraft 1.21.x** that locks accounts to IPs so little gremlins can’t just hack accounts and use them.
No passwords. No auth plugins. Just **IP says yes or go home**.
Built for speed. Optimized. Async. Doesn’t freeze your server like half the plugins on Spigot.
---
## 🚀 What This Plugin Does (aka why this exists)
servers have one big issue:
> upon a account being hacked, its achievements are obtained unfairly
KatIPAuth fixes that by **binding each username to an IP address**.
### Core behavior
- First join → IP gets saved
- Next joins → must be same IP
- Different IP?
- ❌ Login blocked **before they enter**
- 📢 Discord webhook alert gets fired
- 🧍 Player stays OUT. No spawn, no chunks, no funny business
---
## 🔐 Features
### 👤 Player Protection
- Automatic IP binding on first join
- Zero setup for players
- Login blocked instantly on mismatch
### 📡 Discord Alerts (cool embeds, not ugly spam)
Sends a clean embed with:
- Player username
- Stored IP
- Attempted IP
- Timestamp
- Server name
So you can watch account theft attempts like a Netflix series.
### ⚡ Performance
- **Async disk I/O**
- **Async webhook requests**
- Never blocks the main thread
- Safe on restarts and reloads
---
## 🧾 Commands
### Player Commands
#### /ipreset
- Resets your IP binding
- Instantly kicks you
- Next login = new IP bound
#### /ipstatus
- Shows if your IP is bound
- Shows **when** it was bound
- Does NOT leak your IP (privacy W)
---
### Admin Commands (OP only, no funny business)
#### /ipinfo
- Shows stored IP
- Shows last bind/login time
#### /ipforce
- Removes current IP binding and uses the ip from next join
- Does NOT kick the player
#### /ipreload
- Reloads config + Discord webhook
- No restart needed because we’re civilized
---
## ⚙️ Configuration
`plugins/KatIPAuth/config.yml`
```yaml
discord:
webhook: "YOUR_DISCORD_WEBHOOK_URL"
messages:
blocked: "&cLogin blocked: IP mismatch. Contact staff if this is wrong."
```
---
## ❓ FAQ
### Q: Can VPNs bypass this?
- A: VPN users get blocked unless they reset IP. That’s the point.
### Q: Can two people share one IP?
- A: Yes. Same IP ≠ same username. This is IP → username, not the other way around.
### Q: Is this better than AuthMe?
- A: Different goal. AuthMe = passwords.
- KatIPAuth = identity locking using yo ip.
- Use both if you’re paranoid lmao.
