OperatorLogin
OperatorLogin is a server-side authentication mod & plugin. It protects configured players with /register <password> <password> and /login <password> before they can chat, run other commands, interact with blocks, or attack entities.
Current target
- Loader: NeoForge
- Minecraft: 1.21.1
Security notes
- Passwords are stored in
config/operatorlogin-passwords.propertiesas salted PBKDF2-HMAC-SHA256 hashes. - Legacy plain-text and old SHA-256 hashes are migrated to PBKDF2 after a successful login.
- Unauthenticated players can only use
/loginand/register. - Login attempts are rate-limited with a temporary lockout.
- New passwords must satisfy the configured minimum length and cannot be blank or equal to the player name.
Configuration
The mod creates config/operatorlogin.properties on first run.
| Option | Default | Description |
|---|---|---|
authOnlyOperators |
true |
If true, only operators must authenticate. Set to false to protect every player. |
kickTimeoutSeconds |
60 |
How long an unauthenticated player may stay connected. |
minPasswordLength |
8 |
Minimum accepted password length. |
maxLoginAttempts |
5 |
Failed attempts before lockout. |
lockoutSeconds |
60 |
Lockout duration after too many failed attempts. |
| Version | Minecraft | Loader | Download |
|---|---|---|---|
|
OperatorLogin 0.3.0 0.3.0 |
1.21.3
|
neoforge
|
Download |
|
OperatorLogin 0.3.0 0.3.0 |
1.21.1
|
neoforge
|
Download |
|
OperatorLogin 0.1.1 0.1.1 |
1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11
|
bukkit, paper, purpur
|
Download |
|
OperatorLogin 0.2.0 0.2.0 |
1.21.1
|
neoforge
|
Download |
|
OperatorLogin 0.1.0 0.1.0 |
1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11
|
bukkit, paper, purpur
|
Download |