PhoenixLogin – The Most Immersive Authentication Plugin: Map

PhoenixLogin
Advanced Authentication System for Minecraft Servers


Discord: Tomas2193

Overview
PhoenixLogin is a complete authentication solution for offline-mode and hybrid Minecraft servers. It handles everything from registration and login to anti-bot protection, premium account detection, and visual captcha verification — all inside an isolated void world where unauthenticated players can't interact with your server.
Every password is hashed with BCrypt. Every database operation runs asynchronously. Every player state — inventory, gamemode, flight, location — is saved and restored perfectly through the authentication cycle.
No configuration headaches. Drop the JAR, restart, and your server is protected.
Features
Authentication

• Registration and login with BCrypt password hashing
• Configurable password requirements (length, uppercase, numbers, special characters)
• Session system with IP memory — returning players skip login
• Brute-force protection with temporary account lockout
• In-game password change and account deletion
• Auto-kick after configurable timeout

Premium (Mojang) Support

• Automatic detection of premium usernames via Mojang API
• Premium players can skip password login entirely with /premium
• Cracked players on premium names are handled gracefully with /cracked
• Premium status is remembered — future joins are instant
• Clear console warnings if the server is in offline-mode

Anti-Bot Protection

• Connection rate limiting per IP
• Automatic attack detection with lockdown mode
• IP verification on first join (remembered for configurable days)
• Username validation and blacklisting
• Admin notifications for suspicious activity

Captcha Verification

• Map Captcha — renders a visual code on a map item the player holds
• Item Captcha — place a specific item in the correct inventory slot
• Math Captcha — solve a simple math problem (easy/medium/hard)
• Configurable per your server's needs

Void Authentication World

• Players authenticate in a completely isolated void world
• Unauthenticated players can't see or interact with your server
• Automatic world generation — no manual setup
• Full state preservation: gamemode, inventory, flight, and location are saved on entry and restored after login
• Custom spawn point via /setspawn

Visual & Audio Effects

• Boss bar with real-time authentication countdown
• Titles and subtitles for login instructions and feedback
• Action bar timer with color-coded urgency
• Sound effects for login, registration, and errors
• Particle effects on successful authentication
• Login music system — vanilla sounds or custom .nbs files via NoteBlockAPI

Multi-Language Support

• Full translations for English, Spanish, and Portuguese
• Switch language with one config change + /plogin reload
• Every single message is customizable per language file
• New messages from updates merge automatically without overwriting your edits

Player Protection

• Movement, interaction, chat, and commands are blocked until authentication
• Damage immunity (both received and dealt)
• Inventory and item drop prevention
• Players are hidden from each other during authentication
• Configurable command whitelist for unauthenticated players

Database

• SQLite — zero configuration, works out of the box
• MySQL / MariaDB — connection pooling via HikariCP
• All queries run asynchronously — zero impact on server TPS
• Automatic schema migration between versions
• Login history tracking with automatic cleanup

Demo

Full demonstration of the authentication flow, captcha system, and visual effects.

Installation
1. Download PhoenixLogin.jar from this page
2. Place it in your server's plugins/ folder
3. Restart the server
4. Edit plugins/PhoenixLogin/config.yml to your liking
5. (Optional) Install NoteBlockAPI for custom login music
6. Done. Your server is protected.
Commands

PLAYER COMMANDS
  /login <password>                 Aliases: /l
  /register <password> <confirm>    Aliases: /reg
  /captcha <code>                   Solve captcha verification
  /premium                          Enable premium auto-login
  /cracked                          Use password authentication
  /changepassword <old> <new>       Aliases: /changepass, /cp
  /unregister <password>            Delete your account
  /loginhistory                     View your login history
ADMIN COMMANDS
  /plogin reload                    Reload configuration and language
  /plogin info <player>             View player account info
  /plogin unregister <player>       Remove a player's account
  /plogin stats                     Server authentication statistics
  /setspawn                         Set post-login spawn location

Permissions

phoenixlogin.admin       Access to admin commands           Default: op
phoenixlogin.setspawn    Set login spawn location           Default: op
phoenixlogin.bypass      Skip login requirement             Default: false
phoenixlogin.premium     Use premium auto-login             Default: false
phoenixlogin.history     View own login history             Default: true

Configuration Preview

# Language: en, es, pt — switch instantly with /plogin reload
language: en
database:
  type: "SQLITE"              # SQLITE or MYSQL
security:
  password:
    min-length: 4
    max-length: 32
  max-login-attempts: 3
  lockout-duration: 300
  sessions:
    enabled: true
    duration: 60
captcha:
  enabled: true
  type: "MAP"                 # MAP, ITEM, or MATH
void-world:
  enabled: true
settings:
  hide-players: true
  join-message-enabled: true
  clean-chat: true
login:
  allowed-commands: []        # Extra commands allowed during auth
premium:
  enabled: false
  auto-login: true

Requirements

• Minecraft: 1.19 or higher
• Server: Spigot, Paper, Purpur, or compatible forks
• Java: 17 or higher
• Optional: NoteBlockAPI for custom music support

Support
Found a bug or have a suggestion?

• GitHub: Open an issue
• Discord: Tomas2193
• Source Code: GitHub Repository

PhoenixLogin is free, open source, and built for the community.
If this plugin helps your server, a ⭐ review means a lot.
Developer: Tomas2193 — License: MIT