RedAuth

# RedAuth A modern authentication plugin for Paper servers. Players must register or login before they can play unauthenticated players are frozen in a configurable void lobby with full movement, chat, and interaction lock. **Security:** Passwords are hashed with BCrypt and stored in a zero-config SQLite database. Login attempts are limited with automatic temporary lockout after too many failures. **Two-Factor Authentication:** Optional TOTP-based 2FA compatible with Google Authenticator, Authy, and Microsoft Authenticator. Players receive a QR code as an in-game map, scan it with their app, and type the 6-digit code in chat to verify. The map is one-time use and cannot be dropped or traded. **Remember-Me:** Players can enable 1-week auto-login sessions so they don't have to authenticate every time they join. (this excludes 2FA, 2FA is still required if enabled.) **Admin Tools:** OP-only commands to reset passwords, delete accounts, unlock players, and view account information. **Fully Configurable:** All messages, prefix, lobby coordinates, password limits, reminder intervals, and title animations can be customized in `config.yml`. No external dependencies required everything is bundled.