Secura2FA
Java mod listed for Minecraft 1.21. Downloads from the MC Java Mods app on Android.
Secura2FA is a Minecraft plugin that adds two-factor authentication via Telegram and Google Authenticator. It protects player accounts from hijacking by…
⬇ Download on Modrinth
Secura2FA is a security-focused Spigot/Paper plugin that adds mandatory two-factor authentication (2FA) for Minecraft servers.
Players cannot move or use commands until authentication is completed.
Features
- Google Authenticator — TOTP authentication with QR code
- Telegram — login confirmation via Telegram bot
- AES-256-GCM — encrypted 2FA secret storage
- SQLite / MySQL — flexible database support
- Redis — optional caching
- 3 Languages — English, Ukrainian, German
- Customizable messages — Minecraft
&color codes supported
Requirements
| Software | Version |
|---|---|
| Java | 21+ |
| Spigot / Paper | 1.21.1+ |
| MySQL | 5.7+ / 8.0+ |
| Redis | Optional |
Commands
| Command | Description |
|---|---|
/2fa |
Show available 2FA methods |
/2fa go |
Set up Google Authenticator |
/2fa <code> |
Verify a 6-digit TOTP code |
/2fa te |
Link a Telegram account |
Alias: /twofa
Permissions
| Permission | Description | Default |
|---|---|---|
system.2fa.register |
Configure 2FA | true |
system.2fa.needed |
Require 2FA | false |
system.ads.notify |
Update notifications | op |
Configuration
Main options:
Prefix: '&5&l2FA &8≫ '
Language: 'en'
Metrics: 'true'
Servername: 'MinecraftServer'
RegisterPerm: 'system.2fa.register'
Autologin: 'true'
Range: '900'
Type: 'choice'
TypePerm: 'system.2fa.needed'
ReloadKick: 'true'
Updates: 'true'
UpdatePerms: 'system.ads.notify'
Use: 'false'
Host: '127.0.0.1'
Port: '3306'
Database: '2fadb'
Username: 'User'
Password: '123456789'
TelegramBotToken: ''
TelegramBotUsername: ''
RedisUse: 'false'
RedisHost: '127.0.0.1'
RedisPort: '6379'
RedisPassword: ''
RedisDatabase: '0'
Important: Change the default database password before using the plugin in production.
Languages
Language files are located in:
plugins/2FA/lang/
Supported languages:
en · uk · de
All messages can be customized.
Telegram Setup
- Create a Telegram bot using @BotFather.
- Add the bot token and username to
config.yml. - Restart the server.
- Run
/2fa te. - Send
/start <code>to the bot. - Confirm future login attempts through Telegram.
If the login was already verified using Google Authenticator, Telegram will automatically recognize it as verified.
License
MIT License — License.
GitHub — REPOSITORIES.
- Edition: Minecraft Java
- File type: .jar
- Minecraft versions listed: 1.21, 1.21.1, 1.21.2
- How to install: Install the matching mod loader (Forge, Fabric or NeoForge) for your Minecraft version. → Download the .jar. → Put it in the .minecraft/mods folder and launch that loader profile.
- Where to get it: Opens on Modrinth — not every file is mirrored on our own servers.
Install steps are the general flow for this file type — How to install Minecraft Java mods & modpacks walks through it step by step.
- Ships as Secura2FA.jar — drop this file into the mods folder
- Download size: 17.8 MB
- Download link checked 16 Oct 2026 — working
These come from our own check of the pack file, not from the source page.