Authentication Plugin Installation Guide (Offline Mode)
When a Minecraft server is set tooffline-mode=true, it does not verify player accounts with Mojang’s servers. This allows players who do not own a premium Minecraft account to join. However, this also creates a major security risk: anyone can log in using any username, including an admin’s or operator’s account.
To mitigate this, you must use an authentication plugin. This plugin forces every player to register with a password on their first join and log in with that password every time they return.
This document will cover two popular plugins: nLogin and LibreLogin.
General Plugin Installation Steps
The installation process is the same for both plugins. Follow the steps below:- Download the Plugin:
- Go to the SpigotMC website and download the
.jarfile for your chosen plugin.
- Go to the SpigotMC website and download the
- Log in to the Control Panel:
- Open your server panel at https://panel.sapphire-cloud.org and log in.
- Select Your Server:
- From the server list, click on the server where you want to install the plugin.
- Access the File Manager:
- In the server’s navigation menu, select the Files menu.
- Open the Plugins Folder:
- Find and enter the
pluginsfolder. This is where all server plugins are stored.
- Find and enter the
- Upload the Plugin:
- Click the Upload button and select the plugin’s
.jarfile that you just downloaded. Wait for the upload to complete.
- Click the Upload button and select the plugin’s
- Restart the Server:
- Return to the Console page and click the Restart button. This will load the new plugin and create its configuration folder.
1. nLogin
nLogin is a very popular, stable, and feature-rich authentication plugin. It has been used by thousands of servers and is proven to be reliable.Explanation
nLogin provides a robust/register <password> <confirmPassword> and /login <password> system. The plugin focuses on security with many additional features to protect your server from bots and account theft.
Advantages and Disadvantages
| Advantages 👍 | Disadvantages 👎 |
|---|---|
| Very Feature-Rich: Includes CAPTCHA, anti-bruteforce, name restrictions, etc. | Complex Configuration: The many options can be overwhelming for beginners. |
| Highly Customizable: Nearly all messages and settings can be changed. | Slightly Heavier: Its numerous features make it heavier than alternatives. |
| Database Support: Supports SQLite (default) and MySQL for player data. | Infrequently updated, but still works well on the latest versions. |
| Session System: Players don’t need to log in repeatedly if they rejoin within a short time. |
How to Set Up nLogin
After you restart the server, a folder namednLogin will appear inside the plugins folder.
- Open the
plugins/nLoginfolder. - The main file to edit is
config.yml. Open this file. - Some important settings you can change:
-
Changing Messages: Open the
messages.ymlfile to translate or change all messages sent by the plugin to players. -
Password Requirements:
YAML
-
Enabling Login Sessions: To prevent players from needing to log in every time.
YAML
-
Changing Messages: Open the
- After you finish editing, save the
config.ymlfile and typenlogin reloadin the server console or restart the server to apply the changes.
2. LibreLogin
LibreLogin is a more modern, lightweight, and simpler alternative to nLogin. It’s designed to be easy to use without sacrificing essential security features.Explanation
Just like nLogin, LibreLogin provides a registration and login system. Its main focus is on performance, ease of use, and a modern design, both in its code and configuration.Advantages and Disadvantages
| Advantages 👍 | Disadvantages 👎 |
|---|---|
| Lightweight and Fast: Designed for maximum performance, suitable for servers with limited resources. | Fewer Features: Does not have as many features as nLogin (e.g., no built-in CAPTCHA). |
Simple Configuration: The config.yml file is very easy to understand and edit. | Less suitable for very large servers that need complex, layered security. |
| Modern: Actively developed and uses newer technologies. | |
| Supports Modern Hashing: Uses the highly secure Argon2 hashing algorithm for passwords. |
How to Set Up LibreLogin
After restarting the server, aLibreLogin folder will appear in the plugins folder.
- Open the
plugins/LibreLoginfolder. - Edit the
config.ymlfile. Most default settings are good enough, but you might want to change a few things. - Some important settings:
-
Changing Messages: Just like nLogin, all messages are in the
messages.ymlfile. You can translate them as needed. -
Session Duration:
YAML
-
Password Security:
YAML
-
Registration Limit per IP: To prevent bots.
YAML
-
Changing Messages: Just like nLogin, all messages are in the
- Save your changes to
config.yml. In-game, you can use the command/librelogin reload(requires OP privileges) or simply restart the server.
Conclusion: Which One Should You Choose?
- Choose nLogin if you need comprehensive security features, deep customization, and don’t mind a slightly more complex configuration.
- Choose LibreLogin if you want a lightweight, fast, modern, and easy-to-setup plugin for a small to medium-sized server.