Core2FA — Two-Factor Authentication

🛡 Overview

Core2FA is a Minecraft plugin (Spigot, Paper, PurPur, Folia) for that adds two-factor authentication through Telegram. It protects player accounts from hijacking by requiring login confirmation through a linked Telegram account. With Telegram integration, players can manage their account security quickly and easily from their phone.

✨ Features

• Account Linking Players can link their Minecraft account to their Telegram account for extra security.

• Login Confirmation When a player joins, they receive a Telegram notification and can approve or deny the login.

• Remote Security Controls Through an interactive Telegram menu, players can:

  • Approve or deny logins.
  • Block their account if suspicious activity is detected (if enabled).
  • Unlink their account (if allowed by the server admin).
  • Access all settings using the /menu command in Telegram to manage their account remotely.

• Configurable Options Adjustable language, custom server name in notifications, and fine-grained permission controls.

• Folia Support Optimized to run smoothly on Folia-based servers.

⚙ Setup

1. Place the plugin into your /plugins folder.
2. Start the server to generate configuration files.
3. Edit config.yml:

server-name: "MyServer"         # Name displayed in Telegram notifications
language: "en"                  # Plugin language

telegram:
  bot-token: "BOT_TOKEN_HERE"   # Your Telegram bot token
  bot-username: "NAME_BOT"      # Your bot’s username

telegram-menu:
  settings:
    allow-unlinking: false      # Allow unlinking accounts
    allow-remote-ban: false     # Allow remote banning

4. Restart the server.
5. Players can use /2fa to link their account.

📜 Commands

🔑 Permissions

🖥 Compatibility

• Platform: Spigot, Paper, PurPur, Folia
• Java: 17+

📌 Example Usage

1. A player joins the server.
2. They receive a Telegram message: "Confirm login to MyServer?"
3. They press "Confirm" or "Deny".
4. The login is either allowed or blocked.
5. Players can use /menu in Telegram to manage security settings or unlink their account.
6. Server admins can use /2fa reload to apply configuration changes without restarting.

📄 License

MIT License – free to use, share, or modify.