TrustGuard

TrustGuard v2.0.0
TrustGuard is a risk-based verification and account protection plugin for Paper servers.

Unlike traditional captcha plugins that challenge every player equally, TrustGuard evaluates player behaviour and only requests verification when suspicious activity is detected. This allows legitimate players to join normally while still protecting servers from compromised accounts, VPN abuse, bot activity, and suspicious login patterns.

Features
Adaptive Risk Scoring
TrustGuard calculates a configurable risk score using multiple factors:

• New player detection
• Trust status
• IP address changes
• Excessive relogging
• VPN/Proxy used
• Customisable scoring system

Server owners have complete control over how much risk is required before verification is triggered.

Verification System

• Random captcha generation
• Configurable captcha length
• Configurable timeout duration
• Configurable attempt limits
• Automatic verification handling

Verification Lockdown
Players undergoing verification are unable to:

• Move
• Break blocks
• Place blocks
• Interact with the world
• Drop items
• Execute commands

This prevents interaction with the server until verification has been completed successfully.

Trust Database
TrustGuard maintains player trust information including:

• Trust expiry dates
• Last known IP address
• Last seen timestamps
• Relog history

Successfully verified players are trusted automatically for a configurable period.

IP Change Detection
TrustGuard can detect when a player connects from a different IP address and increase their risk score accordingly.

Relog Detection
Repeated reconnects within a configurable time window can increase risk and trigger verification.

Administrative Commands
/tg reload
/tg trust <player>
/tg untrust <player>
/tg force <player>
/tg info <player>

Staff Notifications
Staff with the appropriate permission receive alerts whenever a player triggers TrustGuard verification.

Audit Logging
TrustGuard records:

• Risk assessments
• Verification starts
• Verification successes
• Verification failures
• Administrative actions
• Configuration reloads

Logs are available both in the console and within the plugin's audit log.

Permissions
trustguard.admin
trustguard.bypass
trustguard.notify

Configuration
All major systems are configurable, including:

• Risk thresholds
• Risk scores
• Trust duration
• Captcha settings
• Relog detection settings
• Logging options
• Staff notifications

Compatibility

• Paper
• Purpur
• Modern Paper-based forks

Why TrustGuard?
Most verification plugins ask:

"Can this player solve a captcha?"

TrustGuard asks:

"Does this player actually look suspicious?"

This allows normal players to join uninterrupted while still providing protection when unusual behaviour is detected.

Thank You
More features are planned for future versions, but v2.0.0 represents the second complete production-ready release of TrustGuard.