
FoliaLogin
Folia safe AuthMe style authentication for Folia servers.
Автор: EnXa3531обновлён 23 окт. 2026 г.
УправлениеУтилиты
Описание
FoliaLogin
FoliaLogin is an AuthMe-style authentication plugin built specifically for Folia (also runs on Paper), for Minecraft 1.20+. It provides secure account registration and login, optional two-factor authentication (2FA), and prevents players from interacting with the server until they are authenticated.
Highlights
- Auth commands: /register, /login, /changepassword, /logout
- Two-factor authentication (TOTP): works with Google Authenticator, Authy, Aegis, 2FAS…
- Passwords and 2FA codes are hidden from the console
- Blocks movement, interactions, inventory, chat, and commands until authenticated
- IP-based sessions (optional)
- Configurable reminders (login/register/2FA prompts)
- BCrypt password hashing (secure storage)
- Anti-bruteforce protection: lockouts survive reconnects, 2FA codes can't be reused
- Max accounts per IP (configurable limit)
- Auth spawn with
/authme setspawn(saves your position and the direction you're looking) - Return to last location after login, or always spawn at the spawn on join
- No-return worlds: players who log out in an event/minigame world rejoin at the spawn
- 100% async, thread-safe database operations
- SQLite by default
- MySQL/MariaDB via HikariCP
- 100% Folia-safe (no BukkitScheduler usage)
- Fully configurable: config.yml + lang.yml. New options are added automatically on update, no need to delete your config
- Admin tools: /authme suite + permissions
- Optional premium/proxy mode for auto-login when UUID forwarding is enabled
Compatibility
- Server: Folia or Paper, 1.20 – 1.20.6 (1.21 should work)
- Java: 17 or newer (21 recommended)
Languages
- English by default, fully translatable via
lang.yml
Installation
- Drop the jar into
/plugins - Restart the server
- Configure:
config.ymllang.yml
/authme reloador restart after changes
Updating: just replace the jar and restart. The database and config files are upgraded automatically.
Commands
Players
/register <password> [password](alias/reg)/login <password>(alias/l)/changepassword <old> <new> [new](aliases/changepass,/cp)/logout
Two-factor authentication (2FA)
/2fa add <password>: shows your secret key (click to copy) to add in your authenticator app/2fa confirm <code>: enables 2FA/2fa <code>: enter your code after/login/2fa remove <code>: disables 2FA
Admin
/authme register <player> <password>/authme changepassword <player> <newpass>/authme unregister <player>/authme reload/authme status <player>/authme setspawn: sets the login spawn at your position and facing direction/authme resettotp <player>: removes a player's 2FA (lost phone)
Permissions
| Permission | Default |
|---|---|
authme.player.register / login / changepassword / logout | everyone |
authme.player.totp (set up 2FA) | everyone |
authme.admin.register / changepassword / unregister / reload / status | op |
authme.admin.setspawn / authme.admin.resettotp | op |
authme.bypass (only if security.allowBypassPermission: true) | op |
Spawn options (config.yml)
spawn:
useAuthSpawn: true # teleport players to the spawn until they log in
useWorldSpawn: true # true = world spawn, false = location set with /authme setspawn
spawnWorld: "" # empty = main world
returnToLastLocation: true # after login, go back to where you logged out
forceSpawnOnJoin: false # always start at the spawn when joining
noReturnWorlds: [] # e.g. ["event"]: logging out there = rejoin at the spawn
Галерея
Последние версии
Все версии →release
FoliaLogin 1.1.2
1.1.223 окт. 2026 г.22Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8, 1.21.9, 1.21.10, 1.21.11folia
Что нового
## 1.1.2 – Security fixes
Players who are not logged in yet can no longer:
- use their admin's creative mode: they're put in survival until they log in (game mode restored after), and F3+F4 / game mode changes are blocked (`restrictions.lockGameMode`)
- use items by right-clicking the air (ender pearls, food, potions, projectiles…), eat, or teleport with ender pearls/chorus fruit/spectator mode
- take items from armor stands
- hurt other players with projectiles or lingering potions
- drag items in their inventory
Also:
- `/logout` now saves your position, so `/login` brings you back to where you logged out (no more free teleport)
- Players who aren't logged in can fall instead of being frozen in the air and kicked for flying
- Only one password check at a time per player (protects the server from `/login` spam)
- New: players who don't log in within `security.loginTimeoutSeconds` (default 60) are kicked
release
FoliaLogin 1.1.1
1.1.14 окт. 2026 г.45Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8folia, paper
Что нового
## 1.1.1
- **New:** `spawn.noReturnWorlds`, a list of worlds where the logout position isn't kept (event worlds, minigames…). Players who log out in one of these worlds rejoin at the spawn instead of going back there.
```yaml
spawn:
noReturnWorlds: ["event"]
release
FoliaLogin 1.1.0
1.1.02 окт. 2026 г.14Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8folia, paper
Что нового
## 1.1.0 – Two-factor authentication & spawn options
### New
- **Two-factor authentication (TOTP)**, works with Google Authenticator, Authy, Aegis, 2FAS…
- `/2fa add <password>` shows a key (click to copy), then `/2fa confirm <code>` enables it
- After `/login`, players with 2FA enter `/2fa <code>` (alias: `/totp`)
- `/2fa remove <code>` to disable it, `/authme resettotp <player>` for admins (lost phone)
- Brute-force protection: 5 tries, then kick + temporary lock (survives reconnects). Used codes can't be reused
- **`/authme setspawn`**: saves your position *and the direction you're looking* as the login spawn
- **`spawn.forceSpawnOnJoin`**: always put players at the spawn when they join
- **`spawn.spawnWorld`**: choose which world's spawn is used (default: main world)
### Changes
- The login spawn now uses the main world, not the world the player logged out in
- Passwords and 2FA codes no longer appear in the console
- Login lockouts now survive reconnects (per account + IP), and `/changepassword` is rate limited
- `/authme status` now shows whether a player uses 2FA
- With `premium.allowOfflineMode`, accounts that have 2FA must log in with their password + code
### Fixes
- With `invalidateOnQuit` and `timeoutMinutes: 0`, a player who never logged in could get an auto-login session
### Upgrading
Replace the jar and restart. The database is upgraded automatically, and new options are added to `config.yml` and `lang.yml` without touching your settings.
New permissions: `authme.player.totp` (everyone), `authme.admin.setspawn` and `authme.admin.resettotp` (op).
release
FoliaLogin 1.0.0
0.1.021 янв. 2026 г.271Minecraft: 1.20, 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1, 1.21.2, 1.21.3, 1.21.4, 1.21.5, 1.21.6, 1.21.7, 1.21.8folia


