v3.0.0latestrAuth-3.0.0Sep 19, 2026 rAuth - 3.0.0 Console Password Masking is Now Always Enabled · Passwords entered through the console are automatically masked using both Log4j and JUL. · The mask-console-passwords configuration option has been removed. · Console password masking is now installed automatically when rAuth starts, providing permanent protection against accidentally exposing passwords in console logs. Added Universal Database Support with 6 Database Engines rAuth now supports: · FlatFile · MySQL · MariaDB · PostgreSQL · SQLite · H2 Database connections now use HikariCP connection pooling where applicable. Added automatic database migration support, including automatic schema updates when required. database: type: flatfile # Supported: # flatfile # mysql # mariadb # postgresql # sqlite # h2 Added Forum & Web Database Synchronization rAuth can now synchronize player authentication data with external forum and website databases. Supported platforms include: · XenForo · MyBB · phpBB · WordPress · WBB · Other compatible systems Added support for 15 password hash types: · BCRYPT · BCRYPT2Y · MD5 · SHA1 · SHA256 · SHA512 · DOUBLE_MD5 · SALTED_SHA512 · MYBB · PHPBB · WORDPRESS · XENFORO · WBB4_BCRYPT · ARGON2 · PLAIN Added multiple synchronization modes: · Write-through on registration · Write-through on password change · Primary authentication · Import-on-join forum-sync: enabled: false # Configure your external forum/web database here. Added Krsna AI Assistant rAuth now includes a built-in AI assistant accessible through: · /rauthai · /krsna Added support for 17 AI providers, including: · Gemini · OpenRouter · OpenAI · Cloudflare · Groq · Anthropic · Fireworks · Mistral · Together · Cerebras · Braintrust · HuggingFace · Anyscale · DeepInfra · Lepton · Replicate · DeepSeek Additional AI improvements: · Added built-in API keys for supported providers. · Added a local knowledge.yml knowledge base using RAG. · AI-generated configuration changes require [Apply] confirmation before being applied. · Added per-user AI rate limiting. · Added automatic idle disabling to prevent unnecessary API usage. ai: enabled: true # Configure your preferred AI provider here. Added Rejoin Grace Period · Players can now receive a one-time grace period when reconnecting from the same IP. · Players reconnecting within the configured period can skip the password prompt. · Default grace period: 5 minutes. rejoin-grace: enabled: true minutes: 5 Added Auto-Login Quick Reconnect · Players can automatically restore their authenticated state when quickly reconnecting from the same IP. · Default duration: 60 minutes. · This is separate from the normal Session Login system. auto-login: enabled: true timeout-minutes: 60 Added Discord Password Recovery Players can now recover their account through Discord using verification codes. Added commands: · /forgotpass setdiscord · /forgotpass verifydiscord · /forgotpass discord · /forgotpass discordcode Discord recovery works independently from regular Discord webhook notifications. Added Standalone Anti-VPN Protection rAuth can now detect VPN, proxy, and hosting connections without requiring another external plugin. Added automatic provider selection: · auto · external · standalone Additional improvements: · Separate proxy and hosting detection options. · Detection results are cached for 12 hours to reduce unnecessary API requests. anti-vpn: enabled: true provider: auto check-proxy: true check-hosting: true cache-hours: 12 Added Live Config Editing Administrators can now view and modify configuration values directly in-game without manually opening config.yml. /rauth config get <path> /rauth config set <path> <value> /rauth config list · Added tab completion for configuration paths and commands. Improved Bot Protection · Added a configurable bot-question repeat interval. · Bot verification questions can now automatically repeat while the challenge is active. · This ensures that the verification challenge does not disappear before the player completes it. bot-protection: repeat-interval-seconds: 5 Expanded Admin Commands Added new administration commands and management options for: · Login history · Account unregistering · IP unblocking · Server stop/restart · Authentication spawns · Password resets · Session management · Session clearing · Account transfer · AI model switching Session Management /rauth sessions /rauth clearsessions Account Transfer /rauth transfer AI Model Management /rauth model current /rauth model change Improved Overall Security, Authentication and Configuration Architecture · Expanded database compatibility. · Improved external authentication synchronization. · Improved password security. · Improved reconnect handling. · Improved bot protection. · Added AI-powered assistance and configuration management. · Added more administrative controls. · Continued the goal of making every major part of rAuth highly configurable. Need Help or Found a Bug? Join our Discord to report bugs, request features, or get support.v2.7.0rAuth 2.7.9/1.8-26.2+Jul 27, 2026 rAuth 2.7.0 A major update focused on security, account recovery, and complete configurability. Bot Protection Protect your server against automated bots before they can authenticate. · Interactive human verification with customizable choice questions. · Randomized questions without immediate repetition. · Configurable kick limits and temporary IP bans. · Automatic ban duration multiplier. · Session verification bypass for recently verified players. · Optional kick after successful verification. · Premium, IP, country, and continent bypass support. · Fully configurable messages, sounds, and verification spawn. .SpoilerTarget">Spoiler: Bot Protection Configuration Code (YAML): # ======================================================= # Bot Protection System # ======================================================= bot-protection: enabled : true max-attempts : 5 kick-after : 5 ip-ban-after : 15 ip-ban-time : 30m block-time-multiplier: enabled : true multiplier : 2 session-timeout-minutes : 20 kick-on-success : true success-kick-message : '&a&lVerified! &ePlease rejoin the server to authenticate.' bypass: premium : true whitelisted-countries : true whitelisted-continents : true whitelisted-ips : true choice-questions: - question : Messi or Ronaldo? options : - Messi - Ronaldo - question : Cats or Dogs? options : - Cats - Dogs - question : Pizza or Burger? options : - Pizza - Burger - question : Summer or Winter? options : - Summer - Winter - question : MrBeast or T-Series? options : - MrBeast - T-Series - question : Windows or Linux? options : - Windows - Linux - question : Coffee or Tea? options : - Coffee - Tea messages: prefix : '&a&lrAuth&7» ' start : '&ePlease answer the following question to verify you are human:' invalid-answer : '&cInvalid response! Please type one of the given choices.' kick-message : '&cYou have been kicked for too many invalid bot verification responses.' ban-message : '&cYour IP has been temporarily banned for %time% due to failing bot verification.' remaining-attempts : '&cAttempts left before action : &e%left%' sounds: question-shown : BLOCK_NOTE_BLOCK_PLING success : ENTITY_PLAYER_LEVELUP invalid-answer : ENTITY_VILLAGER_NO kick : ENTITY_VILLAGER_DEATH ban : ENTITY_ENDER_DRAGON_GROWL spawn: world : world x : -45.8830560260036 y : 95.0 z : -2.882257117741117 yaw : 167.97032 pitch : 47.75597 Already Online Protection Players using the same username can no longer join the server simultaneously. .SpoilerTarget">Spoiler: Configuration Code (YAML): already-online-protection: enabled : true kick-message : '&cThis player is already in game!' IP Auto Login For improved security, IP Auto Login is now disabled by default. You can re-enable it from config.yml. .SpoilerTarget">Spoiler: Configuration Code (YAML): login-gamemode : ADVENTURE premium-bypass : true ip-auto-login : false bedrock-bypass : true Country & Continent Filter Restrict or allow connections based on geographic location. · Block specific countries. · Whitelist trusted countries. · Block or whitelist entire continents. · Optional automatic login for trusted countries. .SpoilerTarget">Spoiler: Configuration Code (YAML): # ============================================================= # GEOGRAPHIC COUNTRY & CONTINENT FILTER # ============================================================= country-filter: enabled : false kick-message : '&cConnections from your country ( %country%) are blocked!' blocked-countries : - KP - PK whitelisted-countries : - IN - RU whitelisted-auto-login: title : '&a&lVerified Region' subtitle : '&7Auto-logged in from %country%!' sound : ENTITY_PLAYER_LEVELUP continent-filter: enabled : false kick-message : '&cConnections from your continent ( %continent%) are blocked!' blocked-continents : - whitelisted-continents : - New IP Warning Administrators are now notified whenever they log in from a new IP address. .SpoilerTarget">Spoiler: Configuration Code (YAML): ip-warning : # Enable or disable the IP warning system for administrators (rlogin.admin) enabled : true message : - '&bA new IP has joined!' Weak Password Protection Encourage stronger passwords with customizable password requirements. · Minimum and maximum password length. · Require numbers, uppercase letters, or special characters. · Blacklist commonly used passwords. · Fully customizable validation messages. .SpoilerTarget">Spoiler: Configuration Code (YAML): password-rules: min-length : 6 max-length : 20 require-numbers : true require-uppercase : false require-special : false blacklist : - '12345' - '123456' - '12345678' - password - qwerty - abcdef messages: blacklisted : '&cPassword rejected! This password is too common and insecure.' require-numbers : '&cPassword rejected! Must contain at least one number.' require-uppercase : '&cPassword rejected! Must contain at least one uppercase letter.' require-special : '&cPassword rejected! Must contain at least one special character.' Password Recovery Recover forgotten passwords securely without administrator assistance. · Set a personal security question and answer. · Change recovery information anytime while logged in. · Recover your account before logging in. · Receive one-time permission to reset your password after successful verification. · Supports /forgot, /forgotpass, and /forgotpassword. .SpoilerTarget">Spoiler: Configuration Code (YAML): # ============================= # RECOVERY (Forgot Password) # ============================= forgot-pass: messages: prefix : '&a&lrAuth &r&b [Recovery ] &7» ' no-recovery : '&cNo security question set! Since you are not logged in, you cannot recover your password.' setup-prompt : '&eTo secure your account, set up a recovery question : &b/forgotpass setup <question> | <answer>'v2.6.3rAuthJun 4, 2026 rAuth - 2,6,3
· Anti-VPN · Chat-Protection · 10+ More Features & Fixed Bugs2026-02-07Feb 7, 2026
Similar projects
Plugin →Let Me Despawn
Improves performance by tweaking mob despawn rules. Say bye to pesky unintentional persistent mobs.
25MSueta
JourneyMap
Real-time map used for mapping in-game or your browser as you explore.
14.7MSueta
Emotecraft
Create your own emotes in Minecraft.
7.5MSueta
Simple Tpa
A simple tpa plugin which sends requests
5.4MSueta
Common Network
Forge and Fabric Unified Networking Solution
3.9MSueta
Set Home
A lightweight plugin for players to set their homes.
3.8MSueta