SecureAuth

SecureAuth

A powerful security plugin for Paper 1.21.x that provides a complete authentication system to protect your players and server.

Core Features

Players must register and log in before they can interact with anything — no movement, no chat, no building, no inventory access until authenticated. Unlogged players are completely hidden from others (vanish). Sessions auto-expire after 5 minutes of inactivity.

Password Security

Passwords are hashed with Argon2id — the strongest hashing algorithm available. MD5 and SHA-1 are never used.

2FA via Discord

After entering the correct password, a 6-digit verification code is sent to the player's Discord DM. Players link their Discord account once using /link, and 2FA activates automatically from then on.

Anti-Backdoor Protection

• All database queries use prepared statements — immune to SQL injection
• Rate limiting with automatic lockout after too many failed login attempts
• /op and /deop are blocked in-game — only console can grant OP
• Permission manager commands cannot grant secureauth.bypass to anyone
• Dangerous commands (/stop, /restart, /reload, /plugins) require explicit permissions, not granted to OP by default
• Full audit log written daily to logs/audit-YYYY-MM-DD.log, independent of the database

Command Blocker

Block and hide any command from non-OP players via a simple blacklist in config.yml. Blocked commands are removed from tab-complete and return an unknown command message when typed.

Storage

SQLite — no external database required. Works out of the box on any server.