HexAuthorization

HexAuthorization — Lightweight Login & Registration System
HexAuthorization is a simple, secure, and lightweight authentication plugin for Minecraft servers running Paper or Spigot 1.16.5 and above. It protects your players' accounts with password protection, prevents unauthorized access, and blocks all actions until a player has successfully logged in or registered.

✨ Features

• Registration & Login – Players can register with /register <password> <confirm> and log in with /login <password>.
  
  
• Automatic login after registration – Newly registered players are logged in immediately.
  
  
• Action blocking – Until authenticated, players cannot:
  • Move, jump, or fly
    
    
  • Open inventory or interact with blocks
    
    
  • Break or place blocks
    
    
  • Chat or use commands (except /login and /register)
    
    
  • Attack or be attacked (PvP protection)
    
    
  • Pick up or drop items
• 30-second timeout – Players who fail to log in within 30 seconds are kicked from the server.
  
  
• Secure password storage – Passwords are hashed using SHA-256 with a unique salt (the player's UUID), ensuring that even if the players.yml file is leaked, passwords remain safe.
  
  
• Lightweight – No external dependencies, minimal performance impact.
  
  
• Simple configuration – All player data is stored in plugins/HexAuthorization/players.yml. No complicated setup required.

Commands


Command Aliases Description
/register <password> <confirm> /reg Registers a new account. Passwords must match and be at least 4 characters long.
/login <password> /l Logs in to an existing account.
Permissions
(Optional – by default, all players can use these commands)



Permission Description
hexauthorization.use Allows using /login and /register. (Granted by default to all players.)
Installation

1. Download the latest HexAuthorization.jar from the releases section.
   
   
2. Place the .jar file into your server's plugins folder.
   
   
3. Restart your server (or use /reload, though a restart is recommended).
   
   
4. The plugin will generate a players.yml file inside plugins/HexAuthorization/ to store player data.
   
   
5. That's it! Your server is now protected.

⚙️ Configuration
Currently, messages are hardcoded in English. Future updates may include a config.yml for customizable messages and settings. The players.yml file stores hashed passwords and is automatically managed – no manual editing required.

Compatibility

• Minecraft versions: 1.16.5 (Paper)
  
  
• Java: 16+
  
  
• Dependencies: None – just drop and play!

HexAuthorization – because every server deserves simple, secure authentication.