AuthMeReloaded

# AuthMeReloaded "The best authentication plugin for the Bukkit modding API!"

## Description

Prevent username stealing on your server!

Use it to secure your Offline mode server or to increase your Online mode server's protection!

AuthMeReloaded disallows players who aren't authenticated to do actions like placing blocks, moving,

typing commands or using the inventory. It can also kick players with uncommonly long or short player names or kick players from banned countries.

With the Session Login feature, you don't have to execute the authentication command every time you connect to the server! Each command and every feature can be enabled or disabled from our well-structured configuration file.

You can also create your own translation file and, if you want, you can share it with us! :)

#### Features:

• Dedicated builds for Spigot Legacy (1. 16–1. 19), Spigot 1. 21 (1. 20–1. 21), Paper 1. 21+, and Folia 1. 21+
• Native proxy plugins for BungeeCord and Velocity
• E-Mail Recovery System!
• Username spoofing protection.
• Countries Whitelist/Blacklist! (country codes)
• Built-in AntiBot System!
• ForceLogin Feature: Admins can login with all account via console command!
• Avoid the "Logged in from another location" message!
• Two-factor (2FA) support!
• Session Login!
• Messages served in each player's own Minecraft client language, with server-language fallback
• Editable translations and messages!
• MySQL, MariaDB, PostgreSQL and SQLite Backend support!
• Supported password encryption algorithms: SHA256, ARGON2, BCRYPT, PBKDF2, PBKDF2BASE64 — full list
• Supports hashes from external systems for zero-downtime migration (XFBCRYPT, MYBB, PHPBB, JOOMLA, WORDPRESS, WBB3/WBB4, IPB3, and more)
• Custom MySQL tables/columns names (useful with forum databases)
• Cached database queries!
• Fully compatible with Citizens2, CombatTag, CombatTagPlus!
• Graphical login/register dialogs, with optional Paper/Folia pre-join dialogs
• Restricted users (associate a username with an IP)
• Protect player's inventory until correct authentication (requires PacketEvents)
• Premium bypass: Mojang-account holders skip password auth (requires PacketEvents)
• Saves the quit location of the player
• Ender pearls thrown before authentication are returned to the player on login
• Separate timeouts for login and registration
• Email address confirmation required before saving on /email add and /email change
• Automatic database backup
• Available languages: translations
• Account importers for Auth+, LibreLogin, LimboAuth, nLogin, OpeNLogin, tiAuth — and built-in SQLite ↔ MySQL/MariaDB/PostgreSQL migration.

#### Configuration (https://github.com/AuthMe/AuthMeReloaded/blob/master/docs/config.md)

#### Dialog UI AuthMe can display graphical login/register dialogs instead of chat-based prompts.

• `settings.registration.dialog.postJoin.enable` enables the post-join dialog flow.
• `settings.registration.dialog.preJoin.enable` enables the pre-join dialog flow on Paper/Folia.
• Both options are independent: you can enable either one, both, or neither.
• Pre-join dialogs currently require modern dialog-capable server versions such as Paper/Folia 1. 21. 11+.
• Verified premium players skip the pre-join dialog entirely when premium bypass is enabled.

#### Premium bypass AuthMe can let players with a legitimate Mojang account skip password authentication entirely. Identity is verified via a cryptographic handshake with Mojang's session server during the Minecraft login phase — no password prompt is ever shown.

• Enable with `settings.enablePremium: true` in `config.yml`.
• Players opt in with `/premium` and out with `/freemium` (must be logged in). Admins can enrol or remove players with `/authme premium ` / `/authme freemium `.
• Direct-connection (offline-mode, no proxy): requires (https://github.com/retrooper/packetevents) 2.x. Without it, premium bypass is disabled at startup (fail-closed).
• Behind an online-mode proxy (Velocity / BungeeCord): the proxy authenticates with Mojang and