Better Auth

Minecraft 版本： 1.8.9 1.9 1.9.1 1.9.2 1.9.3 1.9.4 1.10 1.10.1 1.10.2 1.11 1.11.1 1.11.2 1.12 1.12.1 1.12.2 1.13 1.13.1 1.13.2 1.14 1.14.1 1.14.2 1.14.3 1.14.4 1.15 1.15.1 1.15.2 1.16 1.16.1 1.16.2 1.16.3 1.16.4 1.16.5 1.17 1.17.1 1.18 1.18.1 1.18.2 1.19 1.19.1 1.19.2 1.19.3 1.19.4 1.20 1.20.1 1.20.2 1.20.3 1.20.4 1.20.5 1.20.6 1.21 1.21.1 1.21.2 1.21.3 1.21.4 1.21.5 1.21.6 1.21.7 1.21.8 1.21.9 1.21.10 1.21.11 26.1 26.1.1 26.1.2 26.2

平台： bukkit folia paper purpur spigot

标签： management technology utility

Features

• Registration & Login with password hashing (SHA-256 + salt)

• Email verification supporting Gmail, Mail.ru, Yandex, Rambler, Outlook, Yahoo, and any SMTP provider

• Email verification disabled by default — players register instantly. Enable in config for bot protection

• Brute force protection — login blocked after N failed attempts (configurable)

• Code brute force protection — verification code blocked after 3 invalid attempts

• Email spam protection — 60-second cooldown between sends (configurable)

• Auto-login when IP matches (sessions up to 24 hours, configurable)

• IP change confirmation via email — protection against stolen accounts

• Password reset via email code — single /newpassword command

• Frozen unauthorized players — blindness, darkness, invulnerability, water breathing

• Full isolation — no movement, block breaking, chatting, teleportation, item dropping/pickup, fishing, portals, or vehicles

• Bilingual system (Russian / English) with automatic client language detection (1.14+)

• Commands work in both English and Russian — players can use Latin or Cyrillic syntax

• Smart tab completion — shows for English commands and <пароль> for Russian

• Full message customization via locale files — change colors, text, format

• Default language setting for older Minecraft versions (1.8.9–1.13)

• Live config reload — /betterauth reload without server restart

Bilingual Commands
All plugin commands support both English and Russian input. Players can use whichever syntax they prefer.

English Command:

• /register
• /reg
• /login
• /log
• /verify
• /ver
• /confirm
• /resetpassword
• /respas
• /newpassword
• /newpas
• /betterauth reload

Russian Command:

• /регистрация
• /рег
• /вход
• /вх
• /верификация
• /вериф
• /подтверждение
• /сброс_пароля
• /сбр_пар
• /новый_пароль
• /нов_пар
• /авторизация перезагрузка

Key details:

• You can mix languages — enter a Russian command with English arguments and vice versa
• TabCompleter automatically detects the command language and shows hints in the same language
• All error and confirmation messages are also localized

Compatibility:

• Minecraft: 1.8.9 – 26.x
• Server Cores CraftBukkit, Spigot, Paper, Purpur, Pufferfish, Folia
• Java 8 – 25
• Proxies - BungeeCord, Waterfall, Velocity (plugin goes on backend servers)
• Geyser - Full compatibility with Bedrock players

Installation:

• Download the plugin and place it in the plugins/ folder

• Restart the server

• The plugin is ready! Players can register with /register or /регистрация

• To enable email verification: set up email (see below)

• To customize messages: edit files in plugins/BetterAuth/locale/

• To change default language: edit default-locale in config.yml

? Email Verification Setup:

• Email verification is disabled by default. Players register instantly without email confirmation. This is suitable for test and local servers.
• To enable email verification:
• Register a separate email address for your server
• Create an app password (do NOT use your regular email password!)

App password links:
Provider:

• Gmail - https://myaccount.google.com/apppasswords - Requires 2FA? ✅ Yes
• Mail.ru - https://account.mail.ru/user/2-step-auth/passwords/ - Requires 2FA? ❌ No
• Yandex - https://id.yandex.ru/security/app-passwords - Requires 2FA? ❌ No
• Rambler - https://id.rambler.ru/security/app-passwords - Requires 2FA? ❌ No
• Outlook/Hotmail - https://account.live.com/proofs/Manage - Requires 2FA? ✅ Yes
• Yahoo - https://login.yahoo.com/account/security/app-passwords - Requires 2FA? ✅ Yes

Copy the generated password to config.yml and enable verification:

Config.yml:

• email:
  • enabled: true
  • username: "your_email@gmail.com"
  • password: "your_app_password"
  • server-name: "Your Server Name"
  • Run /betterauth reload or restart the server

To disable verification:

Config.yml:

• email:
  • enabled: false # Players register instantly, no emails sent

? Localization & Message Customization:

• All plugin messages are customizable via files in plugins/BetterAuth/locale/

• Any language supported — just add a new file (e.g., de_de.yml)

• Change colors, text, and format of any message — from welcome to errors

• Email subject and body also customizable via locale files

• Built-in translations: Russian (ru_ru.yml) and English (en_us.yml)

• To add your own language:

  • Copy en_us.yml and rename it (e.g., de_de.yml)
  • Translate all messages to your language
  • Restart the server
  • On versions 1.14+ language is auto-detected from the player's Minecraft client
  • On versions 1.8.9 – 1.13 auto-detection is unavailable. Set the language in config.yml:

Config.yml:

• settings:
• default-locale: "en_us" or "ru_ru"

How It Works:

• Without email verification (default):
• Player joins the server — sees registration prompt
• Enters /register pass123 pass123 mail@example.com
• Done! Ready to play
• With email verification:
• Player joins the server — sees registration prompt
• Enters /register pass123 pass123 mail@example.com
• Receives a code via email (in the player's client language)
• Enters /verify 123456
• Done! Ready to play
• IP change:
• Player joins from a new IP
• Enters /login pass123
• Receives a code via email
• Enters /confirm 123456
• IP updated, ready to play
• Forgot password:
• Player enters /resetpassword
• Receives a code via email
• Enters /newpassword 123456 newpass newpass
• Password changed, player is logged in

Security:

• Passwords hashed with SHA-256 and random 16-byte salt
• One-time 6-digit verification codes with 3 attempt limit (configurable)
• Automatic login block after 5 failed attempts (configurable)
• 60-second email cooldown (configurable)
• Unauthorized players fully isolated from the world
• App password does NOT give access to read emails — send-only
• Configuration
• All settings are in plugins/BetterAuth/config.yml