AethelGuard

# 🛡️ AethelGuard (https://cdn.jsdelivr.net/npm/@intergrav/devins-badges@3/assets/cozy/donate/ghsponsors-singular_vector.svg)](https://github.com/sponsors/Aethelster) (https://cdn.jsdelivr.net/npm/@intergrav/devins-badges@3/assets/cozy/available/modrinth_vector.svg)](https://modrinth.com/plugin/aethelguard/) (https://cdn.jsdelivr.net/npm/@intergrav/devins-badges@3/assets/cozy/available/github_vector.svg)](https://github.com/Aethelster/AethelGuard) **Current version:** `v0.4.2-sentinel` Hello there! 👋 **AethelGuard** is a friendly Minecraft account-security plugin for Paper/Purpur servers. It gives server admins a clean in-game authentication system with password login, PIN login, captcha, 2FA, recovery tools, language customization and useful account controls. ✨ When a player joins, AethelGuard keeps them in a safe authentication flow until they are ready to play. Captcha, password or PIN login, 2FA, security questions and recovery options work together inside the game. During that flow, players can be guided with bossbars, messages, sounds and protected inventory behavior, so the server stays calm and understandable. ## ✨ Why Server Owners Like It - 🔐 Strong account protection without confusing players - 🎮 Clear in-game steps from join to normal gameplay - 🧭 Bossbar guidance for the current login step - 💬 Chat protection before authentication is complete - 🎒 Inventory protection while the player is still logging in - 🛡️ Extra checks for suspicious joins - 🌍 Editable English/Turkish messages and custom language files - ❓ Editable security questions for your own community - 👑 Helpful admin commands for account and session control - 😌 Cleaner login experience for survival servers, lobbies and communities ## 🔐 Login Protection - 🔑 Password registration and login - 🔢 4-digit PIN login - 🧩 PIN GUI with themed keypad screens - 🛡️ Captcha options: map, text, number, mixed text and math - 📱 2FA support with authenticator apps - ❓ Security question support after first registration - 🧾 Backup codes for account recovery - 🔁 Session auto-login for trusted returning players - ⏳ Temporary lockouts when too many attempts fail ## 🌍 Messages And Languages AethelGuard is made for servers that want their auth messages to match their own style. - 🇬🇧 English messages - 🇹🇷 Turkish messages - ✏️ Editable player messages - ❓ Editable security questions - 🧾 Custom wording for login, register, captcha, PIN, 2FA and recovery steps - 🗣️ Useful for formal servers, friendly communities or fully localized networks You do not need coding knowledge for this. Server admins can adjust the wording, tone and questions from the plugin's language/message files. ## 🎮 Player Commands | Command | What it does | | --- | --- | | `/register` | Creates a player account with a password. | | `/login` | Logs in with a password. | | `/captcha` | Completes the captcha step. | | `/pin` | Logs in with PIN. | | `/setpin` | Creates the player's first PIN. | | `/changepin` | Changes the player's PIN. | | `/authmode` | Switches between password and PIN login. | | `/changepassword` | Changes the player's password. | | `/twofactor` | Sets up, confirms, disables or verifies 2FA. | | `/securityquestion` | Sets or answers a security question. | | `/backupcodes` | Generates backup codes for account recovery. | | `/recoverymethod` | Chooses the preferred recovery method. | | `/recover` | Recovers an account with a question or backup code. | ## 👑 Admin Commands | Command | What it helps with | | --- | --- | | `/aethelguard reload` | Refreshes messages and settings. | | `/aethelguard status` | Checks a player's auth/account state. | | `/aethelguard ipinfo` | Shows information connected to a player or IP. | | `/aethelguard accounts` | Lists accounts linked to the same player/IP context. | | `/aethelguard sessions` | Shows active auth sessions. | | `/aethelguard session` | Shows one player's session details. | | `/aethelguard clearsession` | Clears one player's session. | | `/aethelguard clearsessions` | Clears all sessions. | | `/aethelguard pingui preview` | Previews a PIN GUI theme. | | `/aethelguard pingui themes` | Lists available PIN GUI themes. | | `/aethelguard unregister` | Removes a player's auth record. | | `/aethelguard changepassword` | Changes a player's password as admin. | | `/aethelguard unlogin` | Sends a player back to auth without kicking them. | Admin aliases: `/ag`, `/aeg`, `/ayarlar` ## 🎮 In-Game Auth Flow Players do not get thrown into the world unprotected. They are kept in a controlled login state until the required steps are finished. 1. 🛡️ Captcha appears if the server asks for it 2. 🔑 The player logs in with password or PIN 3. 📱 2FA is requested if enabled 4. ❓ A security question can be answered when needed 5. ✅ The player is released safely into the server During this flow, chat, inventory access and risky actions can stay locked. After success, the player