# \ud83d\udd10 MyLogin<\/p>\n
MyLogin is a lightweight authentication plugin for Minecraft servers. It provides secure password-based login, strong pre-login protection, IP-based auto login, and migration support from the Passky plugin.<\/p>\n
—<\/p>\n
## \ud83d\udcd6 Project Background<\/p>\n
This plugin was created because the Passky authentication plugin had not received updates for several months.
\nMyLogin was developed as a simple alternative that allows servers to continue using their existing player data while maintaining compatibility with newer Paper versions.<\/p>\n
MyLogin supports migration of **Passky SHA-256 password data**, allowing servers to transition without forcing players to register again.<\/p>\n
—<\/p>\n
## \u2728 Features<\/p>\n
* \ud83d\udd11 Password-based player authentication
\n* \ud83d\udd04 Migration support from Passky (SHA-256 password hashes)
\n* \u23f1 Configurable login timeout
\n* \ud83d\udeab Maximum login attempt protection
\n* \ud83c\udf10 Optional IP-based auto login
\n* \ud83d\udeaa Logout command support
\n* \ud83d\udee0 Admin password management tools
\n* \ud83d\udc41 Blindness effect before login
\n* \ud83c\udf86 Firework effect after successful login
\n* \ud83d\udcc4 YAML-based player data storage<\/p>\n
—<\/p>\n
## \ud83d\udce6 Requirements<\/p>\n
* **Server:** Paper
\n* **Supported versions:** 1.21.4 \u2013 1.21.11
\n* **Java:** 21+<\/p>\n
—<\/p>\n
## \ud83d\udcdc Commands<\/p>\n
| Command | Description | Usage | ### Administrative Commands<\/p>\n | Command | Description | Permission | —<\/p>\n ## \ud83d\udd11 Permissions<\/p>\n | Permission | Description | Default | Administrators with this permission can:<\/p>\n * migrate legacy accounts —<\/p>\n ## Example Usage<\/p>\n Register a new account:<\/p>\n “`text Log in:<\/p>\n “`text Admin resets a password:<\/p>\n “`text Admin deletes a player’s login data:<\/p>\n “`text —<\/p>\n ## \u2699\ufe0f Configuration<\/p>\n The plugin configuration file is located at:<\/p>\n “`text ### Example Configuration<\/p>\n “`yaml min-password-length: 4 max-attempts: 5<\/p>\n ip-remember: true messages: effects: —<\/p>\n ## Setting Explanation<\/p>\n ### Login Timeout<\/p>\n “`yaml How long a player can stay on the server without logging in before being kicked.<\/p>\n Example:<\/p>\n “`text If the player does not run `\/login` or `\/register` within this time, they will be kicked.<\/p>\n —<\/p>\n ### Failed Login Attempts<\/p>\n “`yaml Maximum number of incorrect password attempts before the player is kicked.<\/p>\n This protects against:<\/p>\n * brute force attacks —<\/p>\n ### Password Length<\/p>\n “`yaml Controls the allowed password length when players register.<\/p>\n Example:<\/p>\n “`text Passwords shorter than the minimum or longer than the maximum will be rejected.<\/p>\n —<\/p>\n ### IP Auto Login<\/p>\n “`yaml If enabled, players who logged in previously from the same IP will automatically log in.<\/p>\n Timeout value is in **seconds**.<\/p>\n Example:<\/p>\n “`text After this time expires, the player must log in again.<\/p>\n —<\/p>\n ### Auto Login Message<\/p>\n “`yaml Message sent to players when they are automatically logged in using the IP remember system.<\/p>\n Supports Minecraft color codes using `&`.<\/p>\n —<\/p>\n ### \ud83c\udf87 Login Effects<\/p>\n “`yaml Controls visual effects used by the plugin.<\/p>\n `blind`<\/p>\n * Applies blindness to players who are not logged in.<\/p>\n `firework`<\/p>\n * Plays a firework effect when the player successfully logs in.<\/p>\n —<\/p>\n ## Notes<\/p>\n * Configuration changes require a server restart or plugin reload. —<\/p>\n ## \ud83d\udd04 Migration from Passky<\/p>\n MyLogin supports migrating existing user accounts from the **Passky authentication plugin**.<\/p>\n This allows servers previously using Passky to switch to MyLogin **without forcing players to reset their passwords**.<\/p>\n ### Supported Format<\/p>\n MyLogin reads the legacy Passky user file:<\/p>\n “` Each user entry must contain:<\/p>\n “` Only **SHA-256** hashes are supported.<\/p>\n ### Migration Process<\/p>\n 1. Copy your Passky user file into:<\/p>\n “` 2. Start the server.<\/p>\n 3. MyLogin will automatically import the accounts.<\/p>\n ### Example File<\/p>\n “` ### Migration Logs<\/p>\n After migration, a report will be generated:<\/p>\n “` This file contains:<\/p>\n “` skipped: ### Notes<\/p>\n * Existing MyLogin users will not be overwritten. —<\/p>\n ## \ud83d\udcc2 User Data Storage<\/p>\n MyLogin stores player authentication data in a YAML file.<\/p>\n Location:<\/p>\n “` Each player is stored using their **Minecraft username**.<\/p>\n ### Example<\/p>\n “` ### Field Explanation<\/p>\n | Field | Description | ### Password Security<\/p>\n MyLogin uses **salted SHA-256 hashing**.<\/p>\n Process:<\/p>\n “` Each player receives a **unique random salt** generated during registration.<\/p>\n This prevents:<\/p>\n * rainbow table attacks ### Login Tracking<\/p>\n The plugin stores:<\/p>\n “` as a UNIX timestamp (seconds).<\/p>\n This is used for features such as:<\/p>\n * IP-based auto login ### Failed Login Attempts<\/p>\n The field:<\/p>\n “` tracks how many failed login attempts a player has made.<\/p>\n This can be used for:<\/p>\n * login throttling ### Important Notes<\/p>\n * User data is stored using **player names**, not UUIDs. —<\/p>\n ## \ud83d\udcc4 License<\/p>\n MIT License<\/p>\n","protected":false},"excerpt":{"rendered":" MyLogin is a lightweight authentication plugin for Minecraft servers. It provides secure password-based login, strong pre-login protection, IP-based auto login.<\/p>\n","protected":false},"featured_media":108164,"template":"","meta":{"_minecraft_slug":"mylogin","_minecraft_project_id":"fLOWgMNp","_minecraft_author":"imSpartann","_minecraft_license":"MIT","_minecraft_downloads":34,"_minecraft_follows":1,"_minecraft_client_side":"unsupported","_minecraft_server_side":"required","_minecraft_storage_type":"zip","_minecraft_archive_name":"mylogin.zip","_minecraft_size_bytes":38120,"_minecraft_version_count":1,"_minecraft_updated_at":"2026-05-15T21:51:55.770889Z","_minecraft_date_created":"2026-03-12T02:56:56.073865Z","_minecraft_date_modified":"2026-03-07T14:36:01.236140Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/mylogin","_minecraft_icon_attachment_id":108164,"_minecraft_imported_at":"2026-06-06T06:06:07+00:00","_minecraft_import_hash":"fea7b976b91ca4ffde1e0d616056ffda","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[126,127,128,129,91,123,92],"mod_loader":[132,133,134],"minecraft_version":[62,37,40,41,73,74,38,78,79,80,81,82],"class_list":["post-108163","mod","type-mod","status-publish","has-post-thumbnail","hentry","mod_category-management","mod_category-paper","mod_category-purpur","mod_category-spigot","mod_category-storage","mod_category-technology","mod_category-utility","mod_loader-paper","mod_loader-purpur","mod_loader-spigot","minecraft_version-1-21","minecraft_version-1-21-1","minecraft_version-1-21-10","minecraft_version-1-21-11","minecraft_version-1-21-2","minecraft_version-1-21-3","minecraft_version-1-21-4","minecraft_version-1-21-5","minecraft_version-1-21-6","minecraft_version-1-21-7","minecraft_version-1-21-8","minecraft_version-1-21-9"],"yoast_head":"\n
\n| —————– | ——————————- | ——————————— |
\n| `\/login` | Log in to your account | `\/login
\n| `\/register` | Register a new account | `\/register
\n| `\/changepassword` | Change your password | `\/changepassword
\n| `\/logout` | Log out of your current session | `\/logout` |<\/p>\n
\n| —————– | —————————————— | ————— |
\n| `\/migrate` | Import legacy user data (Passky migration) | `mylogin.admin` |
\n| `\/resetpassword` | Reset a player’s password | `mylogin.admin` |
\n| `\/deleteplayer` | Delete a player’s login data | `mylogin.admin` |
\n| `\/mylogin reload` | Reload plugin configuration | `mylogin.admin` |<\/p>\n
\n| ————— | —————————————- | ——- |
\n| `mylogin.admin` | Allows access to administrative commands | OP |<\/p>\n
\n* reset player passwords
\n* delete player authentication data
\n* reload plugin configuration<\/p>\n
\n\/register mypassword mypassword
\n“`<\/p>\n
\n\/login mypassword
\n“`<\/p>\n
\n\/resetpassword Steve newpassword
\n“`<\/p>\n
\n\/deleteplayer Steve
\n“`<\/p>\n
\nplugins\/MyLogin\/config.yml
\n“`<\/p>\n
\nlogin-timeout-seconds: 300
\nmax-login-attempts: 5<\/p>\n
\nmax-password-length: 32<\/p>\n
\nip-remember-timeout: 86400<\/p>\n
\n auto-login-success: “&aWelcome back! You were logged in automatically.”<\/p>\n
\n blind: true
\n firework: true
\n“`<\/p>\n
\nlogin-timeout-seconds: 300
\n“`<\/p>\n
\n300 seconds = 5 minutes
\n“`<\/p>\n
\nmax-login-attempts: 5
\nmax-attempts: 5
\n“`<\/p>\n
\n* password guessing<\/p>\n
\nmin-password-length: 4
\nmax-password-length: 32
\n“`<\/p>\n
\n\/register mypassword mypassword
\n“`<\/p>\n
\nip-remember: true
\nip-remember-timeout: 86400
\n“`<\/p>\n
\n86400 seconds = 24 hours
\n“`<\/p>\n
\nmessages:
\n auto-login-success: “&aWelcome back! You were logged in automatically.”
\n“`<\/p>\n
\neffects:
\n blind: true
\n firework: true
\n“`<\/p>\n
\n* All values are safe to modify.
\n* Color codes use the standard Minecraft format (`&a`, `&c`, etc).<\/p>\n
\nplugins\/MyLogin\/Migration\/old-users.yml
\n“`<\/p>\n
\nusername:
\n hash:
\n salt:
\n“`<\/p>\n
\nplugins\/MyLogin\/Migration\/old-users.yml
\n“`<\/p>\n
\nSteve:
\n hash: a6c9e0c3e9b5…
\n algo: SHA-256
\n salt: 9f12ab
\n“`<\/p>\n
\nplugins\/MyLogin\/Migration\/migration-log.yml
\n“`<\/p>\n
\nmigrated:
\n – Steve
\n – Alex<\/p>\n
\n Notch: unsupported algorithm
\n“`<\/p>\n
\n* Only valid SHA-256 hashes will be migrated.
\n* Invalid or unsupported entries will be logged and skipped.<\/p>\n
\nplugins\/MyLogin\/data\/users.yml
\n“`<\/p>\n
\nSteve:
\n hash: 7f3c9e4c9b2d…
\n salt: 2c4a9f81
\n algo: SHA-256
\n ip: 192.168.1.10
\n registered: true
\n logged-in: false
\n attempts: 0
\n last-login: 1715002000
\n“`<\/p>\n
\n| ———— | ———————————- |
\n| `hash` | Password hash |
\n| `salt` | Random salt used for hashing |
\n| `algo` | Hash algorithm used |
\n| `ip` | Last known player IP |
\n| `registered` | Whether the player has registered |
\n| `logged-in` | Current login state |
\n| `attempts` | Failed login attempts |
\n| `last-login` | Timestamp of last successful login |<\/p>\n
\nhash = SHA256(password + salt)
\n“`<\/p>\n
\n* identical password hashes between users<\/p>\n
\nlast-login
\n“`<\/p>\n
\n* login timeout systems<\/p>\n
\nattempts
\n“`<\/p>\n
\n* temporary lock systems
\n* security monitoring<\/p>\n
\n* The file is automatically created on first startup.
\n* Changes are saved immediately after registration or login state changes.<\/p>\n