
Vouch
Auth, Secure server-side authentication solution featuring Argon2id hashing, 2FA TOTP, and session persistence.
- Загрузки
- 932
- Подписчики
- 3
- Обновлён
- 9 мая 2026 г.
- Лицензия
- All-Rights-Reserved
Опубликован 3 февраля 2026 г.
Vouch
Vouch is a secure, server-side authentication mod designed for modern Minecraft. It handles player registration, login, and two-factor authentication entirely on the server, meaning players do not need to install anything on their clients to join.
We currently support Minecraft 1.21.1 through 1.21.4 on both Fabric and NeoForge.
How it works
When a player joins, they are placed in a "pre-auth" state where they cannot move, interact, or see chat until they log in.
- New players use
/register <password> <password>to create an account. - Returning players use
/login <password>to access the server. - Session Persistence: If a player disconnects and reconnects quickly from the same IP, their session is remembered so they don't have to type their password again immediately.
Key Features
Security & Performance We use Argon2id for password hashing, which is the current industry standard for security. Crucially, all database operations and hashing run asynchronously on separate threads. This ensures that Vouch has zero impact on your server's TPS, even during heavy login spikes.
Two-Factor Authentication (2FA)
Players can optionally secure their accounts with TOTP 2FA. When enabled via /2fa setup, the mod renders a QR code directly onto an in-game map item. Players can scan this with Google Authenticator, Authy, or Aegis to generate time-based codes.
Database Support Vouch is flexible with data storage. It defaults to H2 (no setup required), but fully supports SQLite, MySQL, and PostgreSQL via HikariCP for larger servers that need connection pooling.
Customization
The mod is localized in English (en_us) and Spanish (es_mx), but all messages can be customized. You can also configure sound effects, titles, and boss bars to match your server's style.
Requirements
- Minecraft 1.21.1, 1.21.2, 1.21.3, or 1.21.4
- Java 21 or higher
- Fabric (requires Fabric API) or NeoForge
- Architectury API is required for both loaders
Documentation
For full configuration guides, permission nodes, and advanced setup, please visit our documentation:
Server-side only
This mod is strictly server-side. Do not install it on the client.
Ченджлог
v0.3.0-mc1.21.1Бета1.21.1 · 9 мая 2026 г.
Vouch v0.3.0-mc1.21.1 (pre-release)
Highlights:
- feat(auth): mixed-mode premium login with cryptographic verification (closes #2 part 1)
Replaces the broken v0.2.0 premium auto-login. The mod now intercepts the login handshake and selectively forces an encryption challenge for usernames that exist in the Mojang API, so premium accounts go through the same session-server verification as on online-mode servers. Non-premium players keep the normal offline flow.
Default is opt-in:
premium_offline_by_default=truemakes all players offline by default, players run/vouch markAsOnlineto enable premium verification on their next join. Admins can use/vouch admin force-offline <player>andforce-online <player>to override per-player. - fix(build): exclude SLF4J from shadow bundle (closes #2 part 2)
HikariCP pulled in
org.slf4jtransitively and shadow was bundling it. The platform already provides SLF4J at runtime, and the duplicate caused a split-package crash on clean NeoForge installs.
Migration notes:
- The
auth.premium_auto_loginconfig option is unchanged but the underlying flow is different. If you were running it on v0.2.0, expect newauth.premium_offline_by_defaultandauth.premium_auto_login_require_2fakeys in your TOML on first start (defaults are safe). - New permissions:
vouch.admin.premium-override,vouch.command.mark-as-online. - New DB table
vouch_premium_overridesis created automatically on startup.
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.2.1-mc1.21.1...v0.3.0-mc1.21.1
v0.3.0-mc1.21.1-neoforgeБета1.21.1 · 9 мая 2026 г.
Vouch v0.3.0-mc1.21.1 (pre-release)
Highlights:
- feat(auth): mixed-mode premium login with cryptographic verification (closes #2 part 1)
Replaces the broken v0.2.0 premium auto-login. The mod now intercepts the login handshake and selectively forces an encryption challenge for usernames that exist in the Mojang API, so premium accounts go through the same session-server verification as on online-mode servers. Non-premium players keep the normal offline flow.
Default is opt-in:
premium_offline_by_default=truemakes all players offline by default, players run/vouch markAsOnlineto enable premium verification on their next join. Admins can use/vouch admin force-offline <player>andforce-online <player>to override per-player. - fix(build): exclude SLF4J from shadow bundle (closes #2 part 2)
HikariCP pulled in
org.slf4jtransitively and shadow was bundling it. The platform already provides SLF4J at runtime, and the duplicate caused a split-package crash on clean NeoForge installs.
Migration notes:
- The
auth.premium_auto_loginconfig option is unchanged but the underlying flow is different. If you were running it on v0.2.0, expect newauth.premium_offline_by_defaultandauth.premium_auto_login_require_2fakeys in your TOML on first start (defaults are safe). - New permissions:
vouch.admin.premium-override,vouch.command.mark-as-online. - New DB table
vouch_premium_overridesis created automatically on startup.
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.2.1-mc1.21.1...v0.3.0-mc1.21.1
v0.2.1-mc1.21.1Бета1.21.1 · 9 мая 2026 г.
Vouch v0.2.1-mc1.21.1 (pre-release)
Highlights:
- fix: shadow relocate
org.checkerframeworkto prevent split-package crash with CC:Tweaked on NeoForge 1.21.1 (closes #4) - i18n: add Russian (ru_ru) and Ukrainian (uk_ua) translations
Thanks to @denmoth for the patch (#3).
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.2.0-mc1.21.1...v0.2.1-mc1.21.1
v0.2.1-mc1.21.1-neoforgeБета1.21.1 · 9 мая 2026 г.
Vouch v0.2.1-mc1.21.1 (pre-release)
Highlights:
- fix: shadow relocate
org.checkerframeworkto prevent split-package crash with CC:Tweaked on NeoForge 1.21.1 (closes #4) - i18n: add Russian (ru_ru) and Ukrainian (uk_ua) translations
Thanks to @denmoth for the patch (#3).
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.2.0-mc1.21.1...v0.2.1-mc1.21.1
v0.2.0-mc1.21.6Бета1.21.6 · 1 марта 2026 г.
Vouch v0.2.0-mc1.21.6 (pre-release)
Highlights:
- feat: add premium auto-login for online/premium accounts
- Auto-authenticate verified premium players on join
- Force 2FA verification for premium players with 2FA enabled
- Configurable via
auth.premium_auto_loginin vouch.toml
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.1.2-mc1.21.6...v0.2.0-mc1.21.6
v0.2.0-mc1.21.6-neoforgeБета1.21.6 · 1 марта 2026 г.
Vouch v0.2.0-mc1.21.6 (pre-release)
Highlights:
- feat: add premium auto-login for online/premium accounts
- Auto-authenticate verified premium players on join
- Force 2FA verification for premium players with 2FA enabled
- Configurable via
auth.premium_auto_loginin vouch.toml
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.1.2-mc1.21.6...v0.2.0-mc1.21.6
v0.2.0-mc1.21.4-neoforgeБета1.21.4 · 1 марта 2026 г.
Vouch v0.2.0-mc1.21.4 (pre-release)
Highlights:
- feat: add premium auto-login for online/premium accounts
- Auto-authenticate verified premium players on join
- Force 2FA verification for premium players with 2FA enabled
- Configurable via
auth.premium_auto_loginin vouch.toml
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.1.2-mc1.21.4...v0.2.0-mc1.21.4
v0.2.0-mc1.21.4Бета1.21.4 · 1 марта 2026 г.
Vouch v0.2.0-mc1.21.4 (pre-release)
Highlights:
- feat: add premium auto-login for online/premium accounts
- Auto-authenticate verified premium players on join
- Force 2FA verification for premium players with 2FA enabled
- Configurable via
auth.premium_auto_loginin vouch.toml
Full Changelog: https://github.com/valentin-marquez/vouch/compare/v0.1.2-mc1.21.4...v0.2.0-mc1.21.4
Комментарии
Загружаем…