CraftersLogin — The Ultimate Authentication System for Minecraft Networks

CraftersLogin is a professional, robust, and highly configurable authentication system designed for Minecraft servers that require full control over player access. Whether you manage a single server or a complex proxy network, CraftersLogin delivers a complete, secure, and easy-to-deploy solution.

---

✨ Why CraftersLogin?

In an environment where player security and server integrity are top priorities, having a reliable authentication system makes all the difference. CraftersLogin was built around three core pillars:

• 🔐 Security — Modern hashing algorithms, brute-force protection, and advanced session control.
• ⚡ Performance — Efficient connections via HikariCP and optional Redis support.
• 🎯 User Experience — Intuitive interface, fully customizable messages, and seamless authentication across servers.

---

🔐 Authentication System

CraftersLogin provides a complete and secure authentication flow for all types of environments:

• Account registration with double password confirmation
• Login protected with encrypted passwords
• Password change directly in-game at any time
• Auto-login for premium players — Mojang/Microsoft accounts verified automatically without any player action
• Offline mode support — Full compatibility with servers running in non-premium or offline mode

---

🌐 Multi-Server Proxy Support

CraftersLogin is fully prepared for networks running Velocity or BungeeCord as a proxy:

• Persistent sessions across servers — Players do not need to log in again when switching servers
• Proxy ↔ backend communication — The proxy automatically notifies backend servers about each player's authentication status
• Differentiated spawn points — Automatic teleport to the authentication area and to the lobby after a successful login

---

💾 Flexible Database Support

The plugin offers three storage options adapted to the size and needs of your network:

Engine	Description	Best For
H2	Embedded database, no additional setup required	Single servers
MySQL	External connection with HikariCP pooling	Multi-server networks
Redis (optional)	Real-time synchronization between servers	Large high-traffic networks

---

🔒 Advanced Security

CraftersLogin implements modern security standards to protect both your players and your infrastructure:

• BCrypt with configurable rounds (recommended — industry standard)
• SHA-256 and Argon2 available as alternatives
• Anti-brute-force protection — Temporary ban after multiple failed login attempts
• Accounts per IP limit — Configurable, defaults to 2 accounts per IP
• Session hijacking protection — IP verification enforced on every session
• Case spoofing prevention — Blocks identity impersonation through username capitalization tricks

---

🎨 Fully Customizable User Experience

Every visual and interactive aspect of the system is completely customizable:

• Titles and subtitles displayed on screen during authentication
• ActionBar countdown timer while the player is waiting to authenticate
• Sound effects for actions such as login, registration, and errors
• Chat clearing on server join for better visibility
• Optional blindness effect while the player has not yet authenticated

---

📋 Player Commands

Command	Description
/register <password> <confirm>	Create a new account
/login <password>	Log in to the server
/changepassword <old> <new> <confirm>	Change your password
/unregister <password>	Delete your account from the server
/premium	Enable automatic verification with your Mojang/Microsoft account
/offline	Switch to offline authentication mode

---

⚡ Admin Commands (/crafterslogin or /cl)

Subcommand	Description	Required Permission
/cl reload	Reload the plugin configuration	crafterslogin.admin.reload
/cl version	Display the current plugin version	crafterslogin.admin.version
/cl info <player>	View account information for a player	crafterslogin.admin.info
/cl accounts	Show the total number of registered accounts	crafterslogin.admin.accounts
/cl forcelogin <player>	Force a player to be logged in	crafterslogin.admin.forcelogin
/cl forcelogout <player>	Force a player to be logged out	crafterslogin.admin.forcelogout
/cl changepass <player> <newpass>	Change another player's password	crafterslogin.admin.changepass
/cl unregister <player>	Unregister a player's account	crafterslogin.admin.unregister
/cl delete <player>	Permanently delete a player's account	crafterslogin.admin.delete
/cl dupeip <ip>	View all accounts registered under an IP	crafterslogin.admin.dupeip
/cl purge <days>	Remove accounts inactive for X days	crafterslogin.admin.purge
/cl convert <plugin>	Migrate data from another auth plugin	crafterslogin.admin.convert
/cl spawns setspawnregistred	Set the authentication spawn point	crafterslogin.admin.spawns
/cl spawns setspawn	Set the lobby spawn point	crafterslogin.admin.spawns

---

🔑 Permissions

Administrator Permissions

crafterslogin.admin             — Full access to all /cl commands
  ├── crafterslogin.admin.reload
  ├── crafterslogin.admin.version
  ├── crafterslogin.admin.info
  ├── crafterslogin.admin.accounts
  ├── crafterslogin.admin.forcelogin
  ├── crafterslogin.admin.forcelogout
  ├── crafterslogin.admin.changepass
  ├── crafterslogin.admin.unregister
  ├── crafterslogin.admin.delete
  ├── crafterslogin.admin.dupeip
  ├── crafterslogin.admin.purge
  ├── crafterslogin.admin.spawns
  └── crafterslogin.admin.convert

User Permissions

crafterslogin.bypass            — Bypasses all authentication (for bots or trusted mods)
crafterslogin.bypass.ip-limit   — Ignores the accounts-per-IP limit
crafterslogin.notify            — Receives plugin update notifications

---

⚙️ Configuration Overview (config.yml)

Database

database:
  type: "h2"  # Options: h2, mysql
  mysql:
    host: "localhost"
    port: 3306
    name: "crafterslogin"
    username: "root"
    password: ""
    useSSL: false
    pool:
      maximum-pool-size: 10
      minimum-idle: 5

Passwords

password:
  algorithm: "BCRYPT"        # BCRYPT, SHA256, ARGON2
  bcrypt-rounds: 10          # Higher = more secure but slower
  min-length: 6
  max-length: 32
  block-username-as-password: true

Sessions

session:
  duration: 10               # Duration in minutes
  same-ip-only: true         # Requires same IP to reuse a session

Security

security:
  max-accounts-per-ip: 2
  max-failed-attempts: 5
  temp-ban-duration: 10      # Minutes
  kick-after-seconds: 60
  block-ip-change-on-session: true
  prevent-case-spoofing: true

---

🚀 Installation

Standalone Server (No Proxy)

1. Download CraftersLogin-1.0.jar
2. Place it in your plugins/ folder
3. Restart the server
4. Configure config.yml as needed
5. Use /cl spawns to set your spawn points

Velocity Proxy Network

1. On the Velocity proxy: Place CraftersLogin-1.0.jar in plugins/
2. On each backend server: Place the same JAR in plugins/ and configure a shared MySQL database (recommended)
3. Set spawn points:
   • Run /cl spawns setspawnregistred on your authentication server
   • Run /cl spawns setspawn on your lobby server

---

📦 Compatibility

Category	Supported
Minecraft versions	1.13 — 1.21.x
Server software	Paper, Spigot, Bukkit
Proxy software	Velocity, BungeeCord, Waterfall
Java	17 or higher

---

💬 Support & Links

If you encounter any issues or have suggestions, feel free to reach out through the Issues tab or join our community.

Developed by xUnknown | Crafters Development
Compatible with Minecraft 1.13 – 1.21.x

License & Intellectual Property

© 2026 Crafters Development. All rights reserved.

Redistribution, copying, or modification of this software is prohibited without the express permission of Crafters Development. This code is intellectual property protected by Chilean Intellectual Property Law 17.336.

[!IMPORTANT]
Redistribution Clarification:
The prohibition on redistribution applies strictly to hosting or uploading the software to external download websites or unauthorized third-party platforms.

This restriction DOES NOT apply to sharing information, screenshots, or official links through:

• Messaging Apps: Discord, WhatsApp, Telegram, etc.
• Social Media: Twitter (X), Facebook, etc.
• Community Groups: Private server chats or staff groups.