Better Auth

Features

• Registration & Login with password hashing (SHA-256 + salt)

• Email verification supporting Gmail, Mail.ru, Yandex, Rambler, Outlook, Yahoo, and any SMTP provider

• Email verification disabled by default — players register instantly. Enable in config for bot protection

• Brute force protection — login blocked after N failed attempts (configurable)

• Code brute force protection — verification code blocked after 3 invalid attempts

• Email spam protection — 60-second cooldown between sends (configurable)

• Auto-login when IP matches (sessions up to 24 hours, configurable)

• IP change confirmation via email — protection against stolen accounts

• Password reset via email code — single /newpassword command

• Frozen unauthorized players — blindness, darkness, invulnerability, water breathing

• Full isolation — no movement, block breaking, chatting, teleportation, item dropping/pickup, fishing, portals, or vehicles

• Bilingual system (Russian / English) with automatic client language detection (1.14+)

• Commands work in both English and Russian — players can use Latin or Cyrillic syntax

• Smart tab completion — shows for English commands and <пароль> for Russian

• Full message customization via locale files — change colors, text, format

• Default language setting for older Minecraft versions (1.8.9–1.13)

• Live config reload — /betterauth reload without server restart

Bilingual Commands All plugin commands support both English and Russian input. Players can use whichever syntax they prefer.

English Command:

• /register
• /reg
• /login
• /log
• /verify
• /ver
• /confirm
• /resetpassword
• /respas
• /newpassword
• /newpas
• /betterauth reload

Russian Command:

• /регистрация
• /рег
• /вход
• /вх
• /верификация
• /вериф
• /подтверждение
• /сброс_пароля
• /сбр_пар
• /новый_пароль
• /нов_пар
• /авторизация перезагрузка

Key details:

• You can mix languages — enter a Russian command with English arguments and vice versa
• TabCompleter automatically detects the command language and shows hints in the same language
• All error and confirmation messages are also localized

Compatibility:

• Minecraft: 1.8.9 – 26.x
• Server Cores CraftBukkit, Spigot, Paper, Purpur, Pufferfish, Folia
• Java 8 – 25
• Proxies - BungeeCord, Waterfall, Velocity (plugin goes on backend servers)
• Geyser - Full compatibility with Bedrock players

Installation:

• Download the plugin and place it in the plugins/ folder

• Restart the server

• The plugin is ready! Players can register with /register or /регистрация

• To enable email verification: set up email (see below)

• To customize messages: edit files in plugins/BetterAuth/locale/

• To change default language: edit default-locale in config.yml

📧 Email Verification Setup:

• Email verification is disabled by default. Players register instantly without email confirmation. This is suitable for test and local servers.
• To enable email verification:
• Register a separate email address for your server
• Create an app password (do NOT use your regular email password!)

App password links: Provider:

• Gmail - https://myaccount.google.com/apppasswords - Requires 2FA? ✅ Yes
• Mail.ru - https://account.mail.ru/user/2-step-auth/passwords/ - Requires 2FA? ❌ No
• Yandex - https://id.yandex.ru/security/app-passwords - Requires 2FA? ❌ No
• Rambler - https://id.rambler.ru/security/app-passwords - Requires 2FA? ❌ No
• Outlook/Hotmail - https://account.live.com/proofs/Manage - Requires 2FA? ✅ Yes
• Yahoo - https://login.yahoo.com/account/security/app-passwords - Requires 2FA? ✅ Yes

Copy the generated password to config.yml and enable verification:

Config.yml:

• email:
  • enabled: true
  • username: "your_email@gmail.com"
  • password: "your_app_password"
  • server-name: "Your Server Name"
  • Run /betterauth reload or restart the server

To disable verification:

Config.yml:

• email:
  • enabled: false # Players register instantly, no emails sent

🌐 Localization & Message Customization:

• All plugin messages are customizable via files in plugins/BetterAuth/locale/

• Any language supported — just add a new file (e.g., de_de.yml)

• Change colors, text, and format of any message — from welcome to errors

• Email subject and body also customizable via locale files

• Built-in translations: Russian (ru_ru.yml) and English (en_us.yml)

• To add your own language:

  • Copy en_us.yml and rename it (e.g., de_de.yml)
  • Translate all messages to your language
  • Restart the server
  • On versions 1.14+ language is auto-detected from the player's Minecraft client
  • On versions 1.8.9 – 1.13 auto-detection is unavailable. Set the language in config.yml:

Config.yml:

• settings:
• default-locale: "en_us" or "ru_ru"

How It Works:

• Without email verification (default):
• Player joins the server — sees registration prompt
• Enters /register pass123 pass123 mail@example.com
• Done! Ready to play
• With email verification:
• Player joins the server — sees registration prompt
• Enters /register pass123 pass123 mail@example.com
• Receives a code via email (in the player's client language)
• Enters /verify 123456
• Done! Ready to play
• IP change:
• Player joins from a new IP
• Enters /login pass123
• Receives a code via email
• Enters /confirm 123456
• IP updated, ready to play
• Forgot password:
• Player enters /resetpassword
• Receives a code via email
• Enters /newpassword 123456 newpass newpass
• Password changed, player is logged in

Security:

• Passwords hashed with SHA-256 and random 16-byte salt
• One-time 6-digit verification codes with 3 attempt limit (configurable)
• Automatic login block after 5 failed attempts (configurable)
• 60-second email cooldown (configurable)
• Unauthorized players fully isolated from the world
• App password does NOT give access to read emails — send-only
• Configuration
• All settings are in plugins/BetterAuth/config.yml