# OpLogin
\nOpLogin is a Paper plugin that keeps operator accounts usable for normal gameplay while locking operator privileges behind authentication. Operators join in a locked state, unlock only when needed, and return to a protected state automatically or manually.<\/p>\n
## Features
\n– Locked operator sessions that disable operator privileges until authentication.
\n– BCrypt password storage with one-time migration support for older AES-encrypted entries.
\n– Chat-safe password login flow: `\/oplogin` starts login and the next chat message is captured privately.
\n– Optional PIN keypad mode with randomized digit positions and custom number heads.
\n– Manual `\/oplogout` support that immediately locks privileges and clears trusted IP auto-login state.
\n– Sensitive command protection that overrides whitelist mistakes for high-risk commands.
\n– Temporary unlock timeouts and optional auto-locking after sensitive commands.
\n– Failed login attempt tracking with temporary blocking.
\n– Operator command audit logging.
\n– Emergency `\/oplockdown` command to force all online operators back into the locked state.
\n– Trusted IP auto-login support that only applies after a successful authenticated login.<\/p>\n
## Commands ## Authentication Modes ### PIN Mode ### Important Mode Change Behavior ## Installation ## Configuration “`yaml Notes: ### `whitelist.yml` Default example:<\/p>\n “`yaml ## Usage ### Log In ### Log Out ### Reset a Credential ## Compatibility ## Credits OpLogin keeps operator accounts safe by locking admin privileges until the real player authenticates. It adds a simple extra layer of protection against stolen accounts, shared access, and accidental permission abuse.<\/p>\n","protected":false},"featured_media":116288,"template":"","meta":{"_minecraft_slug":"op-login","_minecraft_project_id":"PhGsxDZn","_minecraft_author":"periklis20m","_minecraft_license":"MIT","_minecraft_downloads":1293,"_minecraft_follows":7,"_minecraft_client_side":"unsupported","_minecraft_server_side":"required","_minecraft_storage_type":"zip","_minecraft_archive_name":"op-login.zip","_minecraft_size_bytes":157800,"_minecraft_version_count":6,"_minecraft_updated_at":"2026-05-16T07:42:13.901405Z","_minecraft_date_created":"2024-08-06T19:44:40.058994Z","_minecraft_date_modified":"2026-03-11T19:39:26.048301Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/op-login","_minecraft_icon_attachment_id":116288,"_minecraft_imported_at":"2026-06-06T20:15:28+00:00","_minecraft_import_hash":"723837dffad0876c2ee27fb8f27fb281","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[124,126,127,128,129,91,123,92],"mod_loader":[130,132,133,134],"minecraft_version":[59,36,60,93,94,101,102,62,37,40,41,73,74,38,78,79,80,81,82],"class_list":["post-116287","mod","type-mod","status-publish","has-post-thumbnail","hentry","mod_category-bukkit","mod_category-management","mod_category-paper","mod_category-purpur","mod_category-spigot","mod_category-storage","mod_category-technology","mod_category-utility","mod_loader-bukkit","mod_loader-paper","mod_loader-purpur","mod_loader-spigot","minecraft_version-1-20","minecraft_version-1-20-1","minecraft_version-1-20-2","minecraft_version-1-20-3","minecraft_version-1-20-4","minecraft_version-1-20-5","minecraft_version-1-20-6","minecraft_version-1-21","minecraft_version-1-21-1","minecraft_version-1-21-10","minecraft_version-1-21-11","minecraft_version-1-21-2","minecraft_version-1-21-3","minecraft_version-1-21-4","minecraft_version-1-21-5","minecraft_version-1-21-6","minecraft_version-1-21-7","minecraft_version-1-21-8","minecraft_version-1-21-9"],"yoast_head":"\n
\n– `\/opsetpass
\n Console-only. Sets or replaces an operator credential.
\n– `\/oplogin`
\n Starts authentication. In password mode the next chat message is treated as the password. In PIN mode a keypad GUI opens.
\n– `\/oplogout`
\n Locks the current operator session immediately and clears remembered IP login for that operator.
\n– `\/resetop
\n Console-only. Removes an operator credential.
\n– `\/opreload`
\n Console-only. Reloads config and whitelist data.
\n– `\/oplockdown`
\n Console-only. Forces all online operators back into the locked state.<\/p>\n
\n### Password Mode
\n– Default mode.
\n– Operators use `\/oplogin`, then type their password in chat.
\n– Passwords must meet `security.min-password-length`.<\/p>\n
\n– Optional and disabled by default.
\n– Operators use `\/oplogin` and receive a randomized keypad GUI.
\n– Stored credentials must be numeric and match `security.pin-mode.length`.
\n– Number head textures in the keypad use assets from minecraft-heads.com.
\n <\/p>\n
\n– Switching between password mode and PIN mode resets all stored operator credentials and trusted IP entries on the next startup or `\/opreload`.
\n– This is intentional so text passwords cannot remain active in PIN mode, and PIN-only credentials do not carry over into password mode.<\/p>\n
\n1. Download the latest jar.
\n2. Place it in the server `plugins` directory.
\n3. Start the server once to generate `config.yml` and `whitelist.yml`.
\n4. Configure the plugin and reload or restart the server.<\/p>\n
\n### `config.yml`
\nRelevant options:<\/p>\n
\nsecurity:
\n min-password-length: 8
\n max-login-attempts: 3
\n block-duration: 15
\n enable-ip-auto-login: true
\n unlock-duration-seconds: 300
\n auto-lock-ops-on-join: true
\n pin-mode:
\n enabled: false
\n length: 4
\n title: ‘&8OpLogin PIN’
\n“`<\/p>\n
\n– `enable-ip-auto-login` remembers the IP only after a successful authenticated login.
\n– Using `\/oplogout` clears the remembered IP for that operator immediately.
\n– If PIN mode is enabled, credentials set with `\/opsetpass` must be numeric and match the configured PIN length.<\/p>\n
\nCommands listed here can still be used while locked, except for sensitive commands that are always blocked until authentication.<\/p>\n
\nwhitelisted-commands:
\n – help
\n – oplogin
\n – list
\n – ping
\n“`<\/p>\n
\n### Set a Credential
\nUse `\/opsetpass
\nUse `\/oplogin`.<\/p>\n
\nUse `\/oplogout` to re-lock privileges without leaving the server.<\/p>\n
\nUse `\/resetop
\n– Minecraft: Paper 1.21.x
\n– Java: 21<\/p>\n
\n– PIN keypad head textures: minecraft-heads.com<\/p>\n","protected":false},"excerpt":{"rendered":"