Simple Login

SimpleLogin is a plugin/mod that provides a secure login and registration system. It uses SQLite for storage, BCrypt for password hashing, and supports optional TOTP-based 2FA for added account security.

Загрузки: 103K
Подписчики: 54
Обновлён: 6 июля 2026 г.
Лицензия: All-Rights-Reserved

Опубликован 12 мая 2025 г.

Сообщить об ошибке

Description

Simple Login is a lightweight and secure authentication plugin/mod designed for Minecraft servers, supporting versions 1.17–26.x. It provides a login and registration system where players must register using /register <password> <password> and log in using /login <password> before interacting with the server. Until authentication is completed, players are restricted from moving, interacting with their inventory, breaking or placing blocks, and performing other gameplay actions, ensuring protection against unauthorized access.

The plugin uses SQLite for data storage, with passwords hashed using BCrypt for secure account handling. An automatic update checker is included to notify server owners about new releases.

Security & Authentication Features

Optional TOTP-based two-factor authentication (Google Authenticator support)
Global toggle for 2FA
/2faconfirm <6-digit code> required to confirm and complete 2FA setup
Session system with trusted IP support to reduce repeated authenticator prompts
Minimum password length requirement of 8 characters
Pre-login protection system with full restriction handling

Account Management

Account deletion requires confirmation via /delacc confirm <password|6-digit code>
Deletion requests are time-limited and can expire
Pending deletion requests can be cancelled using /delacc cancel
/delacc is restricted until the player is logged in
Detailed error handling for invalid codes, passwords, and expired requests

Admin & Utility Commands

/changepass <player> <newpass> for OPs (console support included with permission control)
/slreload reloads configuration files
/abortsession forces session termination and requires re-login
Session management system with trusted IP handling

Configuration & Localization

All messages are configurable via config.yml.

cancellation messages
timeout handling
invalid password or 2FA code responses
confirmation prompts
usage instructions

Requirements

No external dependencies
Java 17 or higher required

Commands (unmentioned)

Enables 2FA for sender

/enable2fa

Disables 2FA for sender

/disable2fa

Ченджлог

1.16.6Релиз26.2 · 6 июля 2026 г.

Players must log in to use the chat

1.16.6Релиз26.1, 26.1.1, 26.1.2 · 6 июля 2026 г.

Players must log in to use the chat

1.16.6Релиз1.21.9, 1.21.10, 1.21.11 · 6 июля 2026 г.

Players must log in to use the chat

1.16.5Релиз1.21.9, 1.21.10, 1.21.11 · 9 апреля 2026 г.

Added automatic update checker
Confirmation is now required for account deletion
Deleted YAML to SQLite migrator

Localisation string changes:

Renamed:

account_deleted → account_deleted_success

New:

account_delete_cancelled — "§cAccount deletion cancelled."
account_delete_2fa_confirm_usage — "§cUsage: /delacc confirm <6-digit code>"
account_delete_no2fa_confirm_usage — "§cUsage: /delacc confirm <password>"
account_delete_2fa_confirm_prompt — "§aTo confirm account deletion, please run /delacc confirm <6-digit code> within %seconds% seconds."
account_delete_no2fa_confirm_prompt — "§aTo confirm account deletion, please run /delacc confirm <password> within %seconds% seconds."
account_delete_fail — "§cFailed to delete your account."
account_delete_expired — "§cAccount deletion timed out. Please run /delacc again."
account_delete_invalid_2fa — "§cInvalid 2FA code. Account deletion cancelled."
account_delete_no_pending — "§cYou have no pending deletion request. Use /delacc first."
account_delete_no_password — "§cNo password found for your account."
account_delete_wrong_password — "§cIncorrect password. Account deletion cancelled."
account_delete_usage — "§cUsage: /delacc confirm <code/password> OR /delacc cancel"

1.16.5Релиз26.1, 26.1.1, 26.1.2 · 9 апреля 2026 г.

Added automatic update checker
Confirmation is now required for account deletion
Deleted YAML to SQLite migrator

Localisation string changes:

Renamed:

account_deleted → account_deleted_success

New:

account_delete_cancelled — "§cAccount deletion cancelled."
account_delete_2fa_confirm_usage — "§cUsage: /delacc confirm <6-digit code>"
account_delete_no2fa_confirm_usage — "§cUsage: /delacc confirm <password>"
account_delete_2fa_confirm_prompt — "§aTo confirm account deletion, please run /delacc confirm <6-digit code> within %seconds% seconds."
account_delete_no2fa_confirm_prompt — "§aTo confirm account deletion, please run /delacc confirm <password> within %seconds% seconds."
account_delete_fail — "§cFailed to delete your account."
account_delete_expired — "§cAccount deletion timed out. Please run /delacc again."
account_delete_invalid_2fa — "§cInvalid 2FA code. Account deletion cancelled."
account_delete_no_pending — "§cYou have no pending deletion request. Use /delacc first."
account_delete_no_password — "§cNo password found for your account."
account_delete_wrong_password — "§cIncorrect password. Account deletion cancelled."
account_delete_usage — "§cUsage: /delacc confirm <code/password> OR /delacc cancel"

1.16.4Релиз26.1, 26.1.1 · 29 марта 2026 г.

Updated to 26.1

1.16.3Релиз1.21.9, 1.21.10, 1.21.11 · 29 марта 2026 г.

Global toggle for 2FA
Added minimum password lenght (min.: 8)
Players must confirm 2FA with /2faconfirm <6-digit code>
/changepass is callable from console
Other minor fixes

1.16.2Релиз1.21.9, 1.21.10, 1.21.11 · 7 марта 2026 г.

Added automatic migration for the secret column in the users table for databases created before 1.16.0.