
What is LoginTo?
LoginTo is a fully customizable authentication plugin for your Minecraft servers or network.
It offers complete control over messages, along with a feature-rich configuration file that allows you to easily adjust and personalize every aspect of the plugin.
Why choose LoginTo?
LoginTo is simple to set up while still providing powerful features, including:
- Premium authentication (auto-login)
- Secure password hashing using BCrypt
- Full proxy support
- Advanced configuration options
It is built to help you keep your Minecraft server or network secure without sacrificing ease of use.
Updates
LoginTo is actively maintained and regularly updated with bug fixes and new features.
Plugin
Commands
Bukkit
/register <password> <confirmPassword>
Registers a new account. Aliases: /r, /reg
/login <password>
Logs into your account. Aliases: /l
/delacc <player> <confirm>
Deletes a player's account. Permission: OP (by default)
/changepassword <oldPassword> <newPassword>
Changes your account password.
/premium [player]
Sets yourself or another player as a premium user.
/cracked
Sets your account as cracked (disables premium validation).
/getlogs <player> [date: dd/MM/yyyy]
Displays login and registration logs for a player.
/otp
Enable the OTP code command.
/loginto
Enable the LoginTo admin command
Velocity / Bungeecord
/register <password> <confirmPassword>
Registers a new account. Aliases: /r, /reg
/login <password>
Logs into your account. Aliases: /l
/unregister <player_name> <confirm>
Deletes a player's account. Permission: OP (by default)
/changepassword <oldPassword> <newPassword>
Changes your account password.
/premium
Sets your account as premium
/cracked
Sets your account as cracked (disables premium validation).
/loginto
Enable the LoginTo admin command
Permissions
Bukkit
loginto.register
Allows players to use the /register command.
Default: Everyone
loginto.login
Allows players to use the /login command.
Default: Everyone
loginto.delacc
Allows players to delete accounts using /delacc.
Default: OP
loginto.changepassword
Allows players to change their password with /changepassword.
Default: Everyone
loginto.premium.me
Allows players to set their own account as premium. Default: Everyone
loginto.premium.other
Allows setting other players as premium using /premium <player>.
Default: OP
loginto.cracked
Allows players to switch their account to cracked mode. Default: Everyone
loginto.getlogs
Allows viewing login and registration logs with /getlogs.
Default: OP
loginto.otp
Allows players to use the /otp command.
Default: Everyone
loginto.loginto
Allows players to use the /loginto command.
Default: OP
Velocity / Bungeecord
loginto.register
Allows players to use the /register command.
Default: Everyone
loginto.login
Allows players to use the /login command.
Default: Everyone
loginto.unregister
Allows players to delete accounts using /delacc.
Default: No (requires luckperms)
loginto.changepassword
Allows players to change their password with /changepassword.
Default: Everyone
loginto.premium
Allows players to set their own account as premium. Default: Everyone
loginto.cracked
Allows players to switch their account to cracked mode. Default: Everyone
loginto.loginto
Allows players to use the /loginto command.
Default: OP
Images
Register command prompt
Login command prompt
_100% fully customizable messages, from text to colors
Bstats from version 2.1
All Versions
+ Add Version| Name | Game version | Platforms | Published | Downloads | Actions |
|---|---|---|---|---|---|
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 | ||||
| 21h ago | 1 |
Made the OTP code functionality able to be disabled, and using the old /changepassword command
___
Added support for minecraft 26.3
___
Added the first version of the API to listen to some LoginTo events
___
Added an auto-fetch for the latest packetevents version (this change will not affect how the plugin works)
Optimized the library downloading system and made it more stable
___
Reduced the rockyou file size to 50Mb
___
Fixed a bug where a player could spam the /register command
___
Fixed a problem while updating the sessions
Fixed a problem when teleporting the player to another world on bukkit
___
Added support for older version of minecraft (1.13+)
___
Added a periodic feature for sending to the player the login/register prompt until they are not logged in
Rewrote major of the plugin (like 80% of it)
___
Optimized nearly everything by making a lot of functions async
___
Fully changed the config.yml and messages.yml, now those are easier to modify
___
Added webhook.yml for a better management of the discord's webhooks
___
Added sessions, now if a player leaves the server and rejoins back with the same name and ip in a short amount of time, they won't need to re authenticate them self
___
Changed the way data get stored, now the player's position (for bukkit) is stored in the database
___
Added the "_pluginData" folder to separate what the server owner should modify and what is reserved to the plugin
___
Removed the logs feature
___
Fixed the database problem on the proxies
___
Made the bungee/velocity ann bukkit version of the plugin much more similar
___
Added Folia support
___
Changed the required java version to 17 instead of 8
___
Changed the minimum bukkit version from 1.13 to 1.18
___
Changed how the otp code get shown to the player, now instead of a separated world (witch will cause lag), the player will receive a map with that qrcode
___
Changed the package name from net.loginto to com.github.yager400.loginto for (probably) a future api
___
Added title support for the messages with the tag <title> and <subtitle>
___
Added a bridge between proxy and bukkit, now even velocity or bungeecord can blind the player, hide their inventory and stop them from moving
Fixed the dependency download problem on older version
___
Removed the error that pop-up when a player leaves in the qrcode world (this also caused the world not to be deleted automatically)
___
Fixed a problem related to the mysql driver on bungeecord and velocity
Fixed a permission problem with /cracked command
___
Added an option to let cracked accounts bypass the premium authentication even if their username is premium.<br>
However they will still need to do **/login password** before playing into the server
___
Optimized the player's movement event, not it will only block the player moving, not the camera moving
___
Fixed the /otp command problem where, on newer version, it will show an error due to gamerules changes
___
Fixed an error popping out when the /unregister command was executed on yourself (this didn't cause the plugin not to work, but wan annoying to see that error in the logs)
Fixed auto register problem on bukkit, velocity and bungeecord
___
Added a warning log for the packetevents api
___
Added support for bukkit 26.2
Fixed a connectivity problem with MySQL on Velocity and Bungeecord
___
Fixed a small problem with the 'use-built-in-packetevents' feature
___
Added auto registration for Premium and Bedrock players
___
Fixed file versioning on velocity and bungeecord (by xYc4t)
___
Added cool minimessage (no more legacy), now it supports gradient and rgb (only for client and servers over 1.16)
___
Fully redesigned how the plugin in the proxy works
___
Removed the premium player's bridge between the proxy and bukkit.<br>
Why?, the classic premium feature was too complex to set up.<br> Now if you want to use the plugin in a network, you install it only on the proxy. <br> If you don't have a network, you can still use the premium feature with just bukkit (not this variant of the premium feature is no more an experimental feature)
___
/premium and /cracked command now work for the bukkit premium feature
___
- Important**<br>
___
Added experimental.yml versioning
___
Added **experimental** premium authentication on bukkit (with mojang sessions)
___
Fixed other problems caused by minimessage and kyori api
___
Added support for older version (1.13 to 26.1.2)
___
Fixed performance problem while download rockyou.txt
___
Fixed some problem with external dependency, now, the h2 database shouldn't give any problem
___
The plugin is now for minimum java 8 for bukkit and java 17 for velocity/bungeecord
___
Fixed premium database configuration problem (on bukkit)
___
Fixed periodic otp code message not showing
___
Fixed MiniMessages problem with older version of Paper
___
Fixed every problem with the configuration, wrong messages ect...
___
Added experimental.yml file for experimental features
___
Fixed delacc command problem
___
Deprecated **delacc** command and changing it to **unregister** command, changed the permission for the command from **loginto.delacc** to **loginto.unregister**, added the aliases **delacc** for **unregister** command
___
Added minimessages support (legacy)
___
Added authentication via app (like google authenticator, microsoft authenticator and other) with the 6 numeric digit code (OTP)
___
Changed how the /changepassword command works (now it uses the otp code for changing the password)
___
Added /otp command for getting the otp code to change the password
___
Added permission for /otp command: <b>loginto.otp</b>
___
Fixed vehicle despawn bug, now when a player leave the server while riding a vehicle, it will no more get despawned
___
Added banned password (and )
___
Changed build system to gradle
___
Plugin Versioning System
Format: **
MAJOR.MINOR.PATCH**X.0.0| Major Release**- Major structural changes, rewrites, or breaking changes
0.X.0| Minor Release**- New features and improvements
0.0.X| Patch Release**- Bug fixes, security patches, and minor optimizations
___
Added client brand managing, now velocity or bungeecord will check on the user's client name, and if it's not allowed, it will be flagged
___
Added custom command bypass before the login
___
Changed how the packet events dependency work, now you can chose if the plugin should use the built-in (bundled) version of packet events, or get the api from the PacketEvents plugin
___
Fixed the login and register aliases, before /l and /r won't work when the
___
Fixed an issue with the pre command process event
___
Fixed the kick timer at the login step (now after x seconds of wait, the player will be kicked, before this was the case only for the registration)
___
Added a new event, now if the player is not logged, they won't be eable to damage entities or other players
___
Fixed some errors that will appear in the console
___
Changed the required java version to **17**
___
Changed the main api to **1.16.5** since it is more stable and new
___
Fixed the "Logged from another location" kick, now the joining player will get kicked
___
Fixed the compilation from source problem (if you tried to compile the version 3.0, it will gave you an error)
___
Fixed a few problems with the proxy plugin, now the player won't be eable to teleport to another server with a modded client and made the "become premium" or "become cracked" process more secure
___
Fixed/Readded the old "go to another server after login" feature
___
Removed support for legacy versions due to low usage and compatibility issues
___
Removed json data format, now the default will be sqlite
___
Made the plugin generally run faster in much cases
___
The password security is now more advanced with bcrypt
___
The plugin update timeline will change, from now, i will work on making the version 3.0 faster and safer by fixing every bug and not using the 2.x update style (adding some feature every update). From now, the plugin will be simpler like how it was ment from the start.
___
Readded the yml file auto-update using a new api
___
Fixed the proxy class conflict bug
___
Added some listeners and packets regarding the inventory
___
- Next version*: the next version will be the 3.0 so a lot of things will change and this update will take some time.
___
Added maximum and minimum length for the password
___
Made the player not able to see the inventory before the registration/login
___
Added the packetevents plugin library (the plugin is not needed the plugin, loginto will still work )
___
Added the MySQL database type for the premium data sharing between plugins, so now it can work good on pderodactyl
___
Added sessions tracker for the proxy, now if the player stays on the network, in any case he won't need to re-login every time he changes server
___
Fixed the bug where a player can use the proxy commands before the login process
___
Added the PlaceHolderAPI support for messages (is softdepended so if you don't want to install it, the plugin will still work)
- Version 2.6**<br>
Added the listener **onDropItem**, now if someone is not logged in, he won't be able to drop any item
___
Added the teleportation to the old location after the login, now if the player finish the login, he will be teleported where he was
___
Fixed the /login spam bug, now if a player is already logged in, he won't be able to execute again the /login command
___
Fixed the coordinates leek problem, now the player position will get changed when he leave
___
Fixed **WebHooks**, and now they work better than before :)
___
Added custom WebHooks messages
___
Reduced the plugin file size by ~24Mb total by using libby, now you can share this in more social online like discord
___
Changed the way for updating the config in the bukkit plugin, this change was done since it can cause bugs and an ungly config
___
___
Changed the messages in those params:<br>
- `
register_prompt_characters<br> register_character_error
The required characters are now displayed in the message using the
%characters% placeholder<br>
___
Added the **Anti join-spam** feature, now if a player joins in the network too fast it will be banned for a specific ammount of seconds<br>
___
Fixed the **item pickup event**. Now, if someone isn’t logged in, they won’t be able to pick up an item, and the console won’t generate an error when something enters a hopper
___
Added the **players logs** feature
___
Added command /getlogs <username> [optional]<dd/MM/yyyy>, if you do **/getlogs notch** you will get the time and date when he joins + if the authentication is premium or not, if you use **/getlogs notch 12/31/2025** you will get the logs for that player in that day
___
Added permissions for **/getlogs** command:<br>
loginto.getlogs` (By default is set to op) Added velocity and bungeecord support for the premium authentication<br>
Added 3 new commands:<br>
- `
/premium-> Lock your account from cracked user, when this command it's used LoginTo will use the auto-login, and the velocity/bungee plugin won't let cracked account with the same name pass<br> /premium <user>-> ADMIN ONLY: set the status to an account<br>/cracked-> Lock the cracked account, forcing the LoginTo authentication even if the username became premium (can be removed with /premium or /delacc)<br>
Added the permission for the new commands:<br>
loginto.premium.me-> The permission for **using the /premium command,** this is set to everyone by default (but you can change with luckperms)<br>loginto.premium.other-> The permission for **making an account premium**, this is set to only OP by default<br>loginto.cracked.me` -> The permission for **using the /cracked** command, this is set to everyone by default<br>
Added a new listener, now if someone opens a world inventory (chest, furnace exc…) if the player is not logged the event will be cancelled<br>
Added **H2** database support (embedded) for bukkit<br>
Changed database connection to hikari (for more stability and security)<br>
Changed the update checker, now it will check for an update every hour, and not only when you startup your server<br>
- Fixed /delacc** command, now it delete the selected player's account<br>
- Removed the "Go to another server" feature** for now<br>
Fixed the command problem, now if you aren't authenticated you will not be eable to execute commands except for "login" and "register"<br>
Fixed the "kick after too many tries" feature<br>
Added the "kick for waiting too long" feature
Added databases support (Mysql, Postgresql and SQLite)
Added the feature "Remove watermark"
- REQUIRE JAVA 25**<br>
- USE THE NEW VERSION**<br>
- Fixed the premium security issue** using a more sofisticated system <br>Added **/loginto-reload** to reload config, messages and data without reloading or restarting the server
I recently find out that the /premium command sometimes let offline user to use premium's user name, from now until i fix this issue this feature will be off
Changed **/delacc command permission**
- _Experimental: _****Velocity server switching**