HomeJavaModsCore2FA
Core2FA
Core2FA — screenshot 1Core2FA — screenshot 2Core2FA — screenshot 3

Core2FA — Two-Factor Authentication

🛡 Overview

Core2FA is a Minecraft plugin (Spigot, Paper, PurPur, Folia) for that adds two-factor authentication through Telegram. It protects player accounts from hijacking by requiring login confirmation through a linked Telegram account. With Telegram integration, players can manage their account security quickly and easily from their phone.


✨ Features


⚙ Setup

  1. Place the plugin into your /plugins folder.
  2. Start the server to generate configuration files.
  3. Edit config.yml:
server-name: "MyServer"         # Name displayed in Telegram notifications
language: "en"                  # Plugin language

telegram:
  bot-token: "BOT_TOKEN_HERE"   # Your Telegram bot token
  bot-username: "NAME_BOT"      # Your bot’s username

telegram-menu:
  settings:
    allow-unlinking: false      # Allow unlinking accounts
    allow-remote-ban: false     # Allow remote banning
  1. Restart the server.
  2. Players can use /2fa to link their account.

📜 Commands

Command Aliases Description
/2fa /tfa, /auth Main command to manage 2FA
/2fa reload Reloads the plugin configuration
/menu (Telegram) Opens the interactive Telegram menu to manage account remotely

🔑 Permissions

Permission Description
twofa.reload Reloads the plugin configuration (OPs only)

🖥 Compatibility


📌 Example Usage

  1. A player joins the server.
  2. They receive a Telegram message: "Confirm login to MyServer?"
  3. They press "Confirm" or "Deny".
  4. The login is either allowed or blocked.
  5. Players can use /menu in Telegram to manage security settings or unlink their account.
  6. Server admins can use /2fa reload to apply configuration changes without restarting.

📄 License

MIT License – free to use, share, or modify.


Quick facts

Install steps are the general flow for this file type — How to install Minecraft Java mods & modpacks walks through it step by step.

Verified by MCModsHub

These come from our own check of the pack file, not from the source page.

Explore more