All Mods Resource Packs Data Packs Shaders Modpacks Plugins
rAuth

rAuth

by RADHEE • Downloads: 0 • Followers: 0
Description
Gallery
Changelog
Versions

rAuth Banner

Join our Discord

Minecraft plugins that offer advanced authorization and security capabilities, providing over 120 features and more than 30 commands.


Major Features

  • AntiVPN
  • AntiBot
  • Login/Register
  • 90% Configurable
  • Triple Spawn Stage
  • Login/Register UI
  • Email-Recovery
  • Discord Recovery
  • Question Recovery
  • Brute Force Protection
  • Geographic (Country & Continent) Filter
  • Rejoin Grace Period
  • IP Detection
  • Premium & Bedrock/PE Auto-Login
  • 2FA
  • Discord Webhooks
  • Multi Database Supprot
  • AI Assistant
  • More!

Commands & Permissions

Admin Commands

Command Description
/setauthspawn Set the authentication and login spawn.
/setmainspawn Set the main server spawn.
/setbotprotectionspawn Set the bot protection spawn.
/blockedips View the list of blocked IP addresses.
/unblockip <IP> Unblock a previously blocked IP address.
/auth <page> View authentication history.
/clearloginattempts <player/IP> Clear login attempts for a player or IP address.
/rauth setup Open the rAuth setup wizard GUI.
/rauth reload Reload the rAuth configuration in-game.
/krnsa Chat with Krsna AI, the built-in AI assistant.
/model View or change the Krsna AI assistant model.
/language Change the language used by rAuth.
/stopserver Stop the server using rAuth's custom shutdown features.
/restartserver Restart the server using rAuth's custom restart features.
/unregister <player> Unregister a player's account.

Player Commands

Command Description
/register <password> <confirmPassword> Create and secure your account.
/login <password> Authenticate and unlock your account.
/changepass <oldPass> <newPass> <confirmPass> Securely change your existing password.
/forgotpass Recover access to your account if you forget your password.
/2fa Set up and manage two factor authentication.

Installation

Installing rAuth is quick and straightforward.

  1. Download the latest version of rAuth.
  2. Download the recommended dependencies listed below.
  3. Place the plugin and its dependencies inside your server's plugins folder.
  4. Restart your server.
  5. Configure your authentication and main spawns using the available admin commands.
  6. Customize the plugin using the generated configuration files.
  7. Enjoy!

Dependencies

The following dependencies are optional but recommended. Depending on your server setup, they can provide additional compatibility and functionality.

Download FastLogin   Download PlaceholderAPI   Download ProtocolLib
Download Floodgate   Download Geyser

Optional but recommended dependencies that can enhance compatibility and enable additional functionality.


Support and Bug Reports

Found a bug or experiencing an issue?

Join our Discord server and report the problem. You can also get support, request custom plugins, and stay updated with the latest rAuth news and releases.

Subscribe to YouTube View on CurseForge


Visit RadheeVan

Explore the RadheeVan ecosystem

Discover more Minecraft plugins, tools, updates, and projects from RadheeVan.

Visit RadheeVan


rAuth

Fast, secure, and reliable authentication for Minecraft servers.


FAQ

Why do I need an auth plugin?

An authentication plugin protects player accounts on offline-mode and cracked servers. Without authentication, anyone can join using another player's username and potentially access their inventory, location, permissions, and other data.

rAuth provides a secure and customizable authentication system to protect your players and their accounts.

Which Minecraft versions are supported?

rAuth supports Minecraft versions from 1.8 up to the latest supported versions and works with Paper, Spigot, Bukkit and Purpur.

What happens if a player does not log in?

Players who have not successfully authenticated are restricted from normal gameplay. Depending on your configuration, rAuth can prevent actions such as movement, interaction, commands, item usage, and other activities until the player logs in.

Can players move or drop items before logging in?

No. rAuth can restrict unauthenticated players from performing gameplay actions such as moving, interacting, dropping items, picking up items, and more.

These restrictions can be customized through the configuration.

What if a player forgets their password?

rAuth provides account recovery options that can help players regain access to their accounts without requiring an administrator to manually change their password.

The available recovery methods depend on your server's configuration.

How do players register and log in?

New players can register using the configured registration command and create a password for their account.

After registering, players can authenticate using the login command whenever they join the server.

How do I change my password in-game?

Players can change their password using rAuth's password management commands.

How are passwords stored?

rAuth does not store player passwords as plain text. Passwords are securely hashed before being stored in the database.

This helps protect player credentials even if the authentication database is accessed.

Which databases does rAuth support?

rAuth supports multiple database management systems, allowing you to choose the storage solution that best fits your server.

Supported options include SQLite, MySQL, and other supported database configurations.

Can I use rAuth with multiple servers?

Yes. rAuth can be used in server networks and supports database-based synchronization.

With a shared database and the appropriate configuration, player authentication data can be shared between multiple servers.

Do auth plugins lag the server?

rAuth is designed to minimize its impact on server performance. Database operations and authentication-related tasks are handled with performance in mind, so authentication should not noticeably affect normal gameplay when properly configured.

For larger networks, database-based storage can be used instead of relying on a local database.

What is "Session Login"?

Session Login allows a player to remain authenticated for a configured period of time.

After successfully logging in, the player may be able to join again without entering their password every time, depending on the session configuration.

This makes joining the server faster while still providing configurable security controls.

How can we report bugs or suggest features?

You can report bugs, suggest new features, and share feedback through our Discord community.

Does rAuth support Bedrock players?

Yes. rAuth supports Bedrock players through Geyser and Floodgate.

Is rAuth free?

Yes. rAuth is completely free and includes a large collection of advanced authentication and security features.

How secure is rAuth?

rAuth provides multiple security features such as secure password hashing, brute-force protection, IP protection, session management, and other authentication safeguards.

All Versions

+ Add Version
Name Game version Platforms Published Downloads Actions
26.3 26.2 26.1.x +14
Bukkit Paper Purpur Spigot
13h ago 1
26.3 26.2 26.1.x +14
Bukkit Paper Purpur Spigot
13h ago 1
26.2 26.1.x 1.21.x +12
Bukkit Paper Purpur Spigot
13h ago 1
26.2 26.1.x 1.21.x +12
Bukkit Paper Purpur Spigot
13h ago 1
26.2 26.1.x 1.21.x +13
Bukkit Paper Purpur Spigot
13h ago 1
26.2 26.1.x 1.21.x +13
Bukkit Paper Purpur Spigot
13h ago 1
26.2 26.1.x 1.21.x +2
Bukkit Paper Purpur Spigot
13h ago 1
26.1.x 1.21.x 1.20.x +1
Bukkit Paper Purpur Spigot
13h ago 1
26.1.x 1.21.x 1.20.x +1
Bukkit Paper Purpur Spigot
13h ago 1
26.1.x 1.21.x 1.20.x +1
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x +6
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.2.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.20.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
1.21.x 1.20.x 1.19.x
Bukkit Paper Purpur Spigot
13h ago 1
# rAuth - 3.0.1


  • Fixed Bugs**

> **Join our [Discord](https://discord.gg/mm7rgaNsGe) to report bugs, request features, or get support.**

# rAuth - 3.0.0


  • Console password masking is now always enabled.**

  • Passwords entered through the console are automatically masked using both **Log4j and JUL**.
  • The mask-console-passwords configuration option has been removed.
  • Console password masking is now installed automatically when rAuth starts, providing permanent protection against accidentally exposing passwords in console logs.

  • Added Universal Database Support with 6 database engines.**

  • rAuth now supports:

  • FlatFile
  • MySQL
  • MariaDB
  • PostgreSQL
  • SQLite
  • H2
  • Database connections now use **HikariCP connection pooling** where applicable.
  • Added automatic database migration support, including automatic schema updates when required.

``yaml
database:
type: flatfile
# Supported:
# flatfile
# mysql
# mariadb
# postgresql
# sqlite
# h2
`

  • Added Forum & Web Database Synchronization.**

  • rAuth can now synchronize player authentication data with external forum and website databases.
  • Supported platforms include:

  • XenForo
  • MyBB
  • phpBB
  • WordPress
  • WBB
  • and other compatible systems
  • Added support for **15 password hash types**:

  • BCRYPT
  • BCRYPT2Y
  • MD5
  • SHA1
  • SHA256
  • SHA512
  • DOUBLE_MD5
  • SALTED_SHA512
  • MYBB
  • PHPBB
  • WORDPRESS
  • XENFORO
  • WBB4_BCRYPT
  • ARGON2
  • PLAIN
  • Added multiple synchronization modes including:

  • Write-through on registration
  • Write-through on password change
  • Primary authentication
  • Import-on-join

`yaml
forum-sync:
enabled: false
# Configure your external forum/web database here.
`

  • Added Krsna AI Assistant.**

  • rAuth now includes a built-in AI assistant accessible through:

  • /rauthai
  • /krsna
  • Added support for **17 AI providers**, including:

  • Gemini
  • OpenRouter
  • OpenAI
  • Cloudflare
  • Groq
  • Anthropic
  • Fireworks
  • Mistral
  • Together
  • Cerebras
  • Braintrust
  • HuggingFace
  • Anyscale
  • DeepInfra
  • Lepton
  • Replicate
  • DeepSeek
  • Added built-in API keys for supported providers.
  • Added a local knowledge.yml knowledge base using RAG.
  • AI-generated configuration changes require **[Apply] confirmation** before being applied.
  • Added per-user AI rate limiting.
  • Added automatic idle disabling to prevent unnecessary API usage.

`yaml
ai:
enabled: true
# Configure your preferred AI provider here.
`

  • Added Rejoin Grace Period.**

  • Players can now receive a one-time grace period when reconnecting from the same IP.
  • A player who reconnects within the configured period can skip the password prompt.
  • Default grace period: **5 minutes**.

`yaml
rejoin-grace:
enabled: true
minutes: 5
`

  • Added Auto-Login Quick Reconnect.**

  • Players can automatically restore their authenticated state when quickly reconnecting from the same IP.
  • Default duration: **60 minutes**.
  • This is separate from the normal Session Login system.

`yaml
auto-login:
enabled: true
timeout-minutes: 60
`

  • Added Discord Password Recovery.**

  • Players can now recover their account through Discord using verification codes.
  • Added commands for setting up and verifying Discord recovery:

  • /forgotpass setdiscord
  • /forgotpass verifydiscord
  • /forgotpass discord
  • /forgotpass discordcode
  • Discord recovery works independently from regular Discord webhook notifications.

  • Added Standalone Anti-VPN Protection.**

  • rAuth can now detect VPN, proxy, and hosting connections without requiring another external plugin.
  • Added automatic provider selection with:

  • auto
  • external
  • standalone
  • Added separate proxy and hosting detection options.
  • Detection results are cached for **12 hours** to reduce unnecessary API requests.

`yaml
anti-vpn:
enabled: true
provider: auto
check-proxy: true
check-hosting: true
cache-hours: 12
`

  • Added Live Config Editing.**

  • Administrators can now view and modify configuration values directly in-game without manually opening config.yml.

`text
/rauth config get <path>
/rauth config set <path> <value>
/rauth config list
`

  • Added tab completion for configuration paths and commands.

  • Improved Bot Protection.**

  • Added a configurable bot-question repeat interval.
  • Bot verification questions can now automatically repeat while the challenge is active, ensuring that the verification challenge does not disappear before the player completes it.

`yaml
bot-protection:
repeat-interval-seconds: 5
`

  • Expanded Admin Commands.**

  • Added new administration commands and management options for:

  • Login history
  • Account unregistering
  • IP unblocking
  • Server stop/restart
  • Authentication spawns
  • Password resets
  • Session management
  • Session clearing
  • Account transfer
  • AI model switching

  • New session management commands:

`text
/rauth sessions
/rauth clearsessions
`

  • Added account transfer functionality:

`text
/rauth transfer
`

  • Added AI model management:

`text
/rauth model current
/rauth model change
``

  • Improved overall security, authentication and configuration architecture.**

  • Expanded database compatibility.
  • Improved external authentication synchronization.
  • Improved password security.
  • Improved reconnect handling.
  • Improved bot protection.
  • Added AI-powered assistance and configuration management.
  • Added more administrative controls.
  • Continued the goal of making every major part of rAuth highly configurable.

> **Join our [Discord](https://discord.gg/mm7rgaNsGe) to report bugs, request features, or get support.**

# rAuth - 3.0.0


  • Added Two-Factor Authentication using TOTP, compatible with Google Authenticator and similar authenticator applications.

``yaml
# =============================
# TWO-FACTOR AUTHENTICATION
# =============================
two-factor:
enabled: true
issuer: rAuth
code-length: 6
code-ttl-seconds: 30
max-attempts: 5
lock-minutes: 10
require-on-auto-login: true
timeout-seconds: 60
bossbar-title: '&aTwo-Factor Authentication'
`

Commands:

`text
/2fa <enable|disable|code>
/totp <enable|disable|code>
/twofactor <enable|disable|code>
`

  • Added Argon2id password hashing as an alternative to BCrypt.

`yaml
# =============================
# ARGON2ID PASSWORD HASHING
# =============================
argon2:
enabled: false
iterations: 3
memory-kib: 65536
parallelism: 2
upgrade-legacy-hashes: true
`

  • Added email-based password recovery using one-time SMTP verification codes.

`yaml
# =============================
# EMAIL PASSWORD RECOVERY
# =============================
email-recovery:
enabled: false
smtp:
host: smtp.example.com
port: 587
ssl: false
starttls: true
username: ''
password: ''
from: ''
from-name: rAuth
code-length: 6
code-ttl-minutes: 10
max-attempts: 5
resend-cooldown-seconds: 60

forgot-pass:
methods:
email: true
`

Commands:

`text
/forgotpass setemail <email>
/forgotpass email <email>
/forgotpass emailcode <code>
`

  • Added name-change detection and account data transfer. rAuth can detect when a player changes their Minecraft name and allows administrators to transfer account data between names.

`yaml
# =============================
# NAME CHANGE DETECTION
# =============================
name-change:
enabled: true
auto-detect: true
notify-admins: true
update-stored-name: true
`

Command:

`text
/rauth transfer <oldName> <newName>
`

  • Added Discord webhook notifications for security and login events through WebhookNotifier.

`yaml
# =============================
# DISCORD SECURITY WEBHOOKS
# =============================
discord-webhooks:
enabled: false
webhook-url: ''
username: rAuth
avatar-url: ''
timeout-seconds: 10
queue-capacity: 100

events:
join: true
login: true
register: true
wrong-password: true
ip-blocked: true
bot-banned: true
name-change: true
geo-blocked: true
register-flood: true
brute-force-wave: true
`

  • Added Redis multi-server synchronization for bans, account locks, bot bans, bot sessions, whitelists, blacklists, and related authentication data.

`yaml
# =============================
# REDIS MULTI-SERVER SYNC
# =============================
redis:
enabled: false
host: localhost
port: 6379
password: ''
database: 0
timeout-seconds: 5
key-prefix: rauth:
sync-interval-seconds: 5

sync:
ip-bans: true
subnet-bans: true
account-locks: true
bot-bans: true
bot-sessions: true
whitelists: true
blacklists: true
`

  • Added PlaceholderAPI support with rAuth placeholders.

`yaml
placeholders:
enabled: true
`

Available placeholders include:

`text
%rauth_status%
%rauth_registered%
%rauth_lastlogin%
%rauth_2fa_enabled%
%rauth_session_active%
%rauth_language%
%rauth_ip%
`

  • Added per-player language selection with 8 bundled locales: English, German, Spanish, French, Hindi, Portuguese, Russian, and Chinese.

`yaml
# =============================
# PLAYER LOCALES
# =============================
locales:
enabled: true
default-locale: en
available:
  • en
  • de
  • es
  • fr
  • hi
  • pt
  • ru
  • zh
`

Command:

`text
/language <code>
/lang <code>
/locale <code>
`

  • Added an interactive Setup Wizard GUI for configuring rAuth directly in-game.

`yaml
# =============================
# SETUP WIZARD
# =============================
setup-wizard:
enabled: true
title: '&a&l rAuth Setup'
main-title: '&8rAuth Configuration'
`

Command:

`text
/rauth setup
`

  • Added anonymous bStats metrics through MetricsManager.

`yaml
# =============================
# BSTATS METRICS
# =============================
metrics:
enabled: true
plugin-id: 0
`

  • Added saved sessions, allowing players to use a "remember me" option for a configurable number of days.

`yaml
# =============================
# SAVED SESSIONS
# =============================
session:
enabled: true
login-flag: -s
max-days: 30
max-sessions-per-player: 5
auto-login: true
bypass-bot-protection: false
show-tip: true
`

Command:

`text
/login <password> -s
`

  • Added a rejoin grace period. Players who quickly reconnect from the same IP can skip entering their password again during the configured grace period.

`yaml
# =============================
# REJOIN GRACE PERIOD
# =============================
rejoin-grace:
enabled: true
period-minutes: 5
`

  • Added password reset functionality for administrators and players who successfully complete the recovery verification flow.

Commands:

`text
/rauth resetpass <player>
/rauth newpass <newpassword>
`

The password reset flow is protected by the recovery verification system.

  • Added administrator session inspection and session purge commands.

`text
/rauth sessions
/rauth sessions [player]
/rauth clearsessions
/rauth clearsessions [player]
`

Session-related limits use the existing
session.* configuration.

  • Added a version information command.

`text
/rauth version
`

The Bot Protection history can be viewed through
/auth.

  • Added pre-authentication restrictions for block breaking, block placing, and general player interaction through LobbyRestrictionsListener.

These restrictions are hard-blocked for security and do not have a configuration toggle. See the
restrictions: comment in config.yml for details.

  • Added hunger and food-level cancellation while a player is unauthenticated.

This is hard-blocked for security and does not have a configuration toggle.

  • Added console password masking using Log4j and JUL filters.

`yaml
mask-console-passwords: true
`

  • Added flat-file storage fallback. rAuth can now operate without MySQL by using local flat-file caches.

`yaml
mysql:
enabled: false
`

When MySQL is disabled, rAuth uses flat-file storage for data such as:

`text
users
last-location
sessions
recovery
emails
`

  • All the dependencies are optional but reccomended otherwise some feature like Bedrock & Premium auto bypass will not work.

  • Updated and improved the version update notification message.

  • Added new sound effects throughout the plugin, with configurable sound settings.

  • Expanded configuration support across the plugin. Chat messages, sounds, authentication systems, recovery methods, security features, storage, webhooks, Redis synchronization, locales, sessions, and other feature settings can be configured from config.yml`.

> **Join our [Discord](https://discord.gg/mm7rgaNsGe) to report bugs.**

# rAuth - 2.7.0


  • Fixed Bugs

> **Join our [Discord](https://discord.gg/mm7rgaNsGe) to report bugs.**
# rAuth - 2.7.0


  • Added Bot Protection.
``yaml
# =======================================================
# Bot Protection System
# =======================================================
bot-protection:
# Main switch to turn ON/OFF the entire Bot Protection System
enabled: true
max-attempts: 5
kick-after: 5
ip-ban-after: 15
ip-ban-time: 30m
block-time-multiplier:
enabled: true
multiplier: 2

# Session Verification Bypass Window (in minutes)
# If a verified player rejoins within this window, bot verification is skipped.
session-timeout-minutes: 20

# Post-Verification Action
kick-on-success: true
success-kick-message: '&a&lVerified! &ePlease rejoin the server to authenticate.'

# Bot Protection Bypass Configurations
bypass:
premium: true
whitelisted-countries: true
whitelisted-continents: true
whitelisted-ips: true

# Custom choice questions asked on a single line. Either choice is valid.
# The system randomizes questions without immediate repetition.
choice-questions:
  • question: Messi or Ronaldo?
options:
  • Messi
  • Ronaldo
  • question: Cats or Dogs?
options:
  • Cats
  • Dogs
  • question: Pizza or Burger?
options:
  • Pizza
  • Burger
  • question: Summer or Winter?
options:
  • Summer
  • Winter
  • question: MrBeast or T-Series?
options:
  • MrBeast
  • T-Series
  • question: Windows or Linux?
options:
  • Windows
  • Linux
  • question: Coffee or Tea?
options:
  • Coffee
  • Tea

messages:
prefix: '&a&lrAuth&7» '
start: '&ePlease answer the following question to verify you are human:'
invalid-answer: '&cInvalid response! Please type one of the given choices.'
kick-message: '&cYou have been kicked for too many invalid bot verification responses.'
ban-message: '&cYour IP has been temporarily banned for %time% due to failing bot verification.'
remaining-attempts: '&cAttempts left before action: &e%left%'

sounds:
question-shown: BLOCK_NOTE_BLOCK_PLING
success: ENTITY_PLAYER_LEVELUP
invalid-answer: ENTITY_VILLAGER_NO
kick: ENTITY_VILLAGER_DEATH
ban: ENTITY_ENDER_DRAGON_GROWL
spawn:
world: world
x: -45.8830560260036
y: 95.0
z: -2.882257117741117
yaw: 167.97032
pitch: 47.75597
`

  • Now, two or more players with the same name cannot join the server simultaneously.

`yaml
already-online-protection:
enabled: true
kick-message: '&cThis player is already in game!'
`

  • Turned off IP Auto Login by default (you can turn it back on from config.yml).

`yaml
login-gamemode: ADVENTURE
premium-bypass: true
ip-auto-login: false
bedrock-bypass: true
`

  • Added an option to whitelist and block entire countries and continents (can be turned on or off from config.yml).

`yaml
# =============================================================
# GEOGRAPHIC COUNTRY & CONTINENT FILTER
# =============================================================
country-filter:
enabled: false
kick-message: '&cConnections from your country (%country%) are blocked!'
blocked-countries:
  • KP
  • PK
whitelisted-countries:
  • IN
  • RU
# Whitelisted countries bypass bot protection and authentication entirely
whitelisted-auto-login:
title: '&a&lVerified Region'
subtitle: '&7Auto-logged in from %country%!'
sound: ENTITY_PLAYER_LEVELUP

continent-filter:
enabled: false
kick-message: '&cConnections from your continent (%continent%) are blocked!'
blocked-continents:
whitelisted-continents:
`

  • Added a notification message for admins when a player logs in from a new IP.

`yaml
ip-warning:
# Enable or disable the IP warning system for administrators (rlogin.admin)
enabled: true
message:
  • '&e--------------------------------------------------'
  • '&c&l[ADMIN SECURITY WARNING] &eYou logged in from a new IP!'
  • '&7Last Login: &f%last_date%'
  • '&7Last IP: &f%last_ip%'
  • '&7Last Location: &f%last_location%'
  • '&e--------------------------------------------------'
`

  • Added an option to block weak passwords.

`yaml
# =====================================
# WEAK PASSWORD PROTECTION
# =====================================
password-rules:
min-length: 6
max-length: 20
require-numbers: true
require-uppercase: false
require-special: false
blacklist:
  • '12345'
  • '123456'
  • '12345678'
  • password
  • qwerty
  • abcdef
messages:
blacklisted: '&cPassword rejected! This password is too common and insecure.'
require-numbers: '&cPassword rejected! Must contain at least one number.'
require-uppercase: '&cPassword rejected! Must contain at least one uppercase letter.'
require-special: '&cPassword rejected! Must contain at least one special character.'
`

  • Added a password recovery option, using /forgot, /forgotpass, or /forgotpassword. Players can first set a recovery question and its answer. If they use these commands again while logged in, they can change their question and answer. If a player uses these commands before logging in, their saved recovery question will be asked by rAuth. They must answer it using /forgotpass answer <answer>. If the answer is correct, the player will be granted permission to change their password using /rauth newpass <newpass> **one time only**. To use this feature again, the player must repeat the same recovery process.

`yaml
# =============================
# RECOVERY (Forgot Password)
# =============================
forgot-pass:
messages:
prefix: '&a&lrAuth &r&b[Recovery] &7» '
no-recovery: '&cNo security question set! Since you are not logged in, you cannot recover your password.'
setup-prompt: '&eTo secure your account, set up a recovery question: &b/forgotpass setup <question> | <answer>'
change-prompt: '&eTo change your recovery details, use: &b/forgotpass change <current_answer> | <new_question> | <new_answer>'
setup-success: '&aSecurity question configured successfully!'
setup-usage: '&eUsage: /forgotpass setup <question> | <answer>'
already-logged: '&cYou are already logged in. To change recovery, use &e/forgotpass change <current_answer> | <new_question> | <new_answer>'
question-prompt: '&eSecurity Question: &f%question%&e. Answer with &b/forgotpass answer <answer>'
incorrect-answer: '&cIncorrect recovery answer!'
correct-answer: '&aRecovery correct! You now have permission to run &e/rauth newpass <newpassword> &aonce.'
newpass-usage: '&eUsage: /rauth newpass <newpassword>'
newpass-no-permission: '&cYou do not have permission to run this command! Verify security question first.'
change-success: '&aSecurity question and answer updated successfully!'
change-usage: '&eUsage: /forgotpass change <current_answer> | <new_question> | <new_answer>'
`

  • Dependencies are now optional.
  • Mixed and changed the version update message.
  • Added new SFX, which can be turned on or off from config.yml`.
  • Every single thing, from chat messages to SFX to the entire feature set, is configurable.

> **Join our [Discord](https://discord.gg/mm7rgaNsGe) to report bugs.**
# rAuth - 2.6.5


  • Added new config options to turn off/on and change rAuth's sfx.
  • Now players can't drop ther items/change their hotbar/access to inventory items.

> **Join our [Discord](https://discord.gg/mm7rgaNsGe) For Reporting Bugs**
# rAuth - 2.6.4


  • Added a chat message that notifies players when they are using an outdated version of rAuth and provides the latest version available.
  • Added console messages related to version updates.


> **Join our [Discord](https://discord.gg/mm7rgaNsGe) For Reporting Bugs**
# rAuth - 2.6.3


  • Hook Between rAuth & FastLogin Has Fixed.

## Given Video Shows The Right Way To Setup Premium/Bedrock/PE Bypass:
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/n1ax53oNhsU" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>

> **Join our [Discord](https://discord.gg/YbAsbBJvG8) For Reporting Bugs**
# rAuth - 2.6.2


  • Premium Auto-Login issue Fixed.

## Given Video Shows The Right Way To Setup Premium/Bedrock/PE Bypass:
<iframe width="560" height="315" src="https://www.youtube-nocookie.com/embed/n1ax53oNhsU" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe>

> **Join our [Discord](https://discord.gg/YbAsbBJvG8) For Reporting Bugs**
# rAuth - 2.6.1


  • Added Advance Chat Authorization.
  • Fix Small Bugs.

> **Join our [Discord](https://discord.gg/YbAsbBJvG8) For Reporting Bugs**
# rAuth - 2.6.0


  • Add Anti-VPN
  • Everything Can be Change through Config

> **Join our [Discord](https://discord.gg/YbAsbBJvG8) For Reporting Bugs**
# rAuth - 2.5.3


  • Add Option To Off And On Blindness & Invisibily Effects In Conifg File

> **Join our [Discord](https://discord.gg/YbAsbBJvG8) For Reporting Bugs**
# rAuth - 2.5.2


  • Fixed Name Issues

> **Join our [Discord](https://discord.gg/YbAsbBJvG8) For Reporting Bugs**
# rAuth - 2.5.1


  • Fixed Name And Version Issues

> **Join our [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs**
# rAuth - 2.5.0



  • Changed Name To rAuth
  • Changed Icon

> _Name Changed Because our Plugin is Not Just About Login/Register System, its a Complete Advance Autorization Plugin_

> **Join our [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs**
# rLogin - 2.2.4


## Major Security Upgrade – Migration to bcrypt

This update replaces the legacy SHA-256 password hashing mechanism with **bcrypt**, a modern and adaptive hashing algorithm specifically designed to mitigate brute-force attacks.

All existing accounts remain fully functional. No manual migration is required.

> **Join our [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs**
# rLogin - 2.2.3


### Added
  • New commands for stop & restart the server
  • a warn sfx and tite text on the screen before the server gets restart or stop
  • New Commands
  • /stopserver
  • /restartserver
  • Custimizable through config.yml folder

![Warn Title Before Server Gets Restart](https://cdn.modrinth.com/data/cached_images/e9006bf47ddb065c881c135bc77649ed2c401ed2.jpeg)

> **Join our [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs**
# rLogin - 2.2.2


  • Added a Cool Msg On Server Console, When The Plugin Enable

> **Join Our [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs**
# rLogin - 1.2.1


## New Features

  • Brute Force Protection
  • Everything Can Be Customize Through Config.yml File
  • New Commands For Easy Management

## New Commands

  • /unblockip <ip> - **To Unblock Any IP**
  • blockedips or /blockedips 2 - **To Show The List of Blocked IPs or Turn Page**
  • /clearloginattempts <player/ip> - **To clear Any Particular Player/IP Login Attempts**


> **For Reporting Bugs, Join our [Discord](https://discord.gg/chTuJRvz3t)**
# rLogin - 2.2.0


  • Added MySQL System
  • Now For 1.19-1.21.11+

> **Join our [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs**
# rLogin - 2.2.0


  • Added MySQL System

> **Join our [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs**
# rLogin - 2.1


### Added
  • Bedrock / PE bypass support
  • No damage while player is in **Login / Register** state
  • Fall damage disabled
  • Entity damage disabled
  • Environmental damage disabled

### Fixed
  • Configuration file system issues
  • Config values now load and save properly
  • Missing config entries are auto-generated
  • Login / Register related bugs fixed

### Improved
  • Bedrock & Java cross-platform compatibility
  • Overall login stability and safety

# rLogin - 2.0


### ✅ Added
  • /unregister <player>**
  • Admin-only command
  • Force unregisters a player
  • Immediately logs out and kicks the player from the server

  • /auth**
  • Shows authentication history of **all players**
  • Useful for admin monitoring and security purposes

### 🔧 Improved
  • Config File System**
  • Fixed and stabilized configuration handling
  • Configs now load and save correctly without issues

  • Login Spawn System**
  • Players now spawn at the **last location they left**
  • Fully configurable via the plugin’s config folder

### 🐛 Fixed
  • Player data not saving correctly on logout
  • Login state issues when players rejoin the server


> **For Reporting Bugs, Join Our [Discord](https://discord.gg/chTuJRvz3t)**

# rLogin - 1.2


  • Now For 1.19-1.21.11+**
[1.2] rLogin 1.2/1.21+ by RADHEE on Oct 15, 2026
Download
# rLogin - 1.2


  • Added /changepass command again**
  • Fixed Config Issues (Now more Customizable)**

![UpdateConfig](https://cdn.modrinth.com/data/cached_images/28bba7125c0af4cefdee97181f06538a06d2ca0a.png)


# **rLogin 1.1**


## **Trying To Make LimboAuth For Paper/Puper/Bukkit/Spigot Servers**

  • Improve Gui
  • Added A Boss Bar Time On The Screen Top For Counting The Time Left For Login/Register
![ImprovedGUI](https://cdn.modrinth.com/data/cached_images/69597c09f16922e766bb33570014490333b2ba30.png)
  • Customizable Messages & Setting From Config Folder
![Customizable](https://cdn.modrinth.com/data/cached_images/4fd3d2e98f37b3daa6c36f1b496d6bdf3e7f42b4.png)
  • No Impact On Fps (Even Boost when You're Registering!)
  • Added SFX When You Login/Register/Join/AutoLogin/EnterWrongSyntax
  • Added Future Of No Login For Premium Player(You can Change it From Config)
  • Removed /changepass command
  • And More...

Join [Discord](https://discord.gg/chTuJRvz3t) For Reporting Bugs...
# rLogin - First Release

rAuth Icon
Download rAuth
Select game version
Select platform