⚡ ElectronGuard — The Next-Gen Auth System

Stop relying on outdated chat logins. Give your players a premium, hyper-secure, and immersive entry experience.

ElectronGuard isn't just another auth plugin—it's a complete overhaul of how players join your Minecraft server. Built exclusively for modern servers (1.21.1 – 1.21.11), it completely replaces the clunky /login flow with a stunning full-screen UI, a sleek web panel, and military-grade Argon2id security.

The best part? Zero resource packs required, and zero database setup needed. Drop it in, and watch your server instantly feel more professional and become completely bulletproof against bots.

---

🚫 The Bot-Proof Fortress: 100% Immunity

Standard auth plugins just cancel chat events, leaving your server vulnerable to packet-injection bots and Force-OP exploits. ElectronGuard is different:

• Zero Interaction: Using ProtocolLib, we block actions directly at the packet level. A bot can join, but it cannot inject a single command or chat message.
• Web-Gate Security: Because authentication happens via the Web Panel or custom visual UI, automated "Password Cracking" chat scripts are rendered 100% useless. They simply cannot interact with the login flow!
• Total Isolation: Unauthenticated players are held in a "Limbo" void where server logic doesn't even reach them until they successfully log in.
• Bedrock Bot Shield: Mobile/PE players face an additional Unicode CAPTCHA before they can even attempt a password — a math challenge rendered in obfuscated Unicode characters that looks normal to humans but is completely unreadable by bots and scripts.

---

🔥 Why Server Owners Love ElectronGuard

🎨 Stunning In-Game UI (No Resource Pack!)

Ditch the chat box. ElectronGuard takes over the screen with a smooth, animated Title/Subtitle UI displaying your server's branding, username, and password fields.

• Navigate fields seamlessly with SNEAK.
• Submit instantly with LEFT CLICK.
• Live session ID & countdown timer right in the action bar.

🌐 Built-In Web Panel

Give your players choices! Alongside the in-game UI, players receive a clickable chat link opening a beautiful, real-time browser login panel.

• Self-hosted on your server (no third-party data tracking).
• Instantly communicates with the plugin API.
• Offline fallback page included.

📱 Full Bedrock / PE Support (Geyser + Floodgate)

Running a network that serves both Java and Bedrock players? ElectronGuard has you covered. Mobile players connecting via GeyserMC and Floodgate are automatically detected and get a dedicated chat-based authentication flow — because they can't click browser links.

The Bedrock flow works like this:

1. 🔍 Auto-Detection — ElectronGuard silently checks Floodgate and GeyserMC APIs the moment the player connects. No config needed.
2. 🧩 Unicode CAPTCHA — Before touching a password, the player must solve a simple math question rendered in obfuscated Unicode (e.g. 𝟓 ➕ 𝟖 = ?). It looks normal to a human but is completely unreadable by bots parsing raw strings.
   • Wrong answer → instant kick. No retries. Bot loops die immediately.
3. 🔑 Chat Commands — After passing the CAPTCHA, players use /login <password> or /register <pass> <confirm> — clean, simple, and mobile-friendly.
4. 🚫 Java players are blocked from using /login and /register — they are always redirected to the browser panel, keeping the two flows completely separate.

No Geyser/Floodgate installed? No problem. The plugin loads and runs perfectly fine — Bedrock support simply stays dormant with zero performance impact.

🛡️ The "Limbo" Void (Absolute Security)

The second an unauthenticated player joins, they are instantly teleported to a private, frozen "Limbo" dimension.

• Zero Leaks: Blindness + Night Vision ensures your real world is completely hidden.
• Zero Griefing: No movement, no mob spawns, no chat, no item drops.
• Upon login, their exact location, health, flight state, and game mode are flawlessly restored.

🔐 Unbreakable Backend Architecture

• Argon2id Hashing: We don't mess around with outdated MD5 or SHA256. We use industry-leading Argon2id (tunable to your hardware limits) with full salt.
• Brute-Force Protection: Auto-kick and temporary IP lockouts for failed attempts.
• Auto-Login Sessions: Configurable IP memory so regular players don't have to type their password every single time.

💾 Plug & Play Database Setup

• SQLite Ready: Works instantly out of the box. database.db auto-generates with WAL mode enabled for lightning-fast, safe concurrent access.
• MySQL/MariaDB Ready: Scaling up? Switch to a remote database with a single config edit. Connection pooling is built right in.

---

🚀 The ElectronGuard Advantage

Still using standard auth plugins? Here is why it's time to upgrade:

Feature	⚡ ElectronGuard	❌ Typical Auth Plugins
Full-Screen UI	✅ Built-in & Animated	❌ Clunky chat or buggy chest GUIs
Resource Pack Required?	✅ NO! 100% Vanilla	❌ Often required for custom GUIs
Web Browser Login	✅ Integrated Web Panel	❌ Rarely exists
Anti-Cracking Bots	✅ Immune (Web-based & packet blocked)	❌ Bots can spam chat easily
Password Hashing	✅ Argon2id (Enterprise Grade)	⚠️ MD5, SHA256, or BCrypt
Input Blocking	✅ Packet-level (ProtocolLib)	❌ Easily bypassed Event Cancellations
Bedrock / PE Support	✅ Auto-detected via Geyser/Floodgate	❌ Broken or missing entirely
Bedrock CAPTCHA Shield	✅ Unicode bot-proof CAPTCHA	❌ None
Admin Setup Alerts	✅ Auto-reminds online OPs	❌ Leaves devs guessing

---

🛠️ Effortless Installation

1. Drop ElectronGuard.jar into your /plugins folder.
2. Ensure you have ProtocolLib installed (Required).
3. (Optional) Install GeyserMC + Floodgate to enable Bedrock player support.
4. Start your server. config.yml will automatically generate.
5. Important: Allocate the web panel port in your host (e.g., Pterodactyl/Crafty). Don't worry, the plugin will automatically remind online OPs if you forget!
6. Run /eg reload or restart your server.
7. Done! Your server is now secured — for both Java and Bedrock players.

---

⚙️ Commands & Permissions

Admin Tools (electronguard.admin / OP)

Command	Action
/eg reload	Hot-reload the entire plugin config
/eg resetpass <player> <pass>	Instantly reset a user's password
/eg forcelogin <player>	Bypass auth and force a player in
/eg kick <player>	Kick a player from the limbo state
/eg info [player]	View deep stats and session diagnostics

Player Tools

• /changepassword <old> <new> — Allow players to manage their own security.
• electronguard.bypass — Give this permission to bypass auth entirely (great for verified staff).

Bedrock / PE Player Commands

• /captcha <answer> — Solve the CAPTCHA challenge on join (auto-shown, Bedrock only).
• /login <password> — Authenticate with your password (Bedrock only — Java uses the web panel).
• /register <password> <confirm> — Create your account (Bedrock only).

---

📋 Technical Requirements

• Platform: Spigot or Paper (Highly Recommended)
• Versions: 1.21.1 – 1.21.11
• Java: 21 or higher
• Required: ProtocolLib 5.4.0+
• Optional: GeyserMC + Floodgate (for Bedrock/PE player support)

💡 Developer Note: ElectronGuard was built to respect your server's performance. It runs asynchronously where it matters and leaves zero ghost entities or chunk loads behind.

---

🐛 Support, Bugs & Open Source

We listen to our community! If you have a feature request, found a bug, or want to contribute, drop by our GitHub Page (Add your link here).

⭐ If ElectronGuard secured your server, don't forget to leave a 5-star review!