# EzAuth<\/p>\n
Drop-in authentication for modern Paper and Bukkit servers with polished UX, standalone or integrated TOTP 2FA, and flexible storage.<\/p>\n
<\/p>\n
## Overview<\/p>\n
EzAuth locks down your server’s spawn with email-backed registrations, password logins, and time-limited sessions. Players are guided through the process with configurable messages, multi-language prompts (English, Nederlands, Espa\u00f1ol out of the box), visual effects, and reminders while administrators retain full control over storage backends, security policy, and optional SMTP settings. Toggle between pure login, opt-in 2FA, or a **standalone two-factor** flow that layers EzAuth’s `\/2fa` experience onto any existing authentication plugin. **New:** guide administrators through an in-game installation that immediately re-locks every active session when setup finishes, tap into the new session caching layer for instant post-login checks, then hook directly into Laravel, WordPress, or XenForo user tables so your website and server share a single account system.<\/p>\n
## Key Features<\/p>\n
– **Player-first onboarding** \u2013 `\/register` validates emails, enforces configurable password lengths, blocks duplicate emails or accounts, and saves asynchronously so players never stall the main thread.
\n– **Guided ingame installation** \u2013 `\/ezauth install` walks staff through launch day setup, optionally bypasses the login guard until you’re ready, and re-locks every active session the moment installation is marked complete.
\n– **Localized messaging** \u2013 Ship multiple language packs (English, Nederlands, Espa\u00f1ol by default), set your default language, and let players opt into their preferred message set on join.
\n– **Hardened logins** \u2013 `\/login` honours staged cooldowns, respects bypass permissions, caches accounts for quicker checks, and runs password hashing off-thread before celebrating success with optional effects.
\n– **Built-in TOTP two-factor** \u2013 `\/2fa` walks players through setup, confirmation, verification, status checks, and disabling while the TwoFactorService generates secure secrets and verifies codes. Flip `security.yml`’s `authentication-type` to `two_factor` to run EzAuth as a standalone 2FA module alongside plugins like AuthMe or via proxy networks.
\n– **Session control** \u2013 Movement, chat, and non-whitelisted commands are blocked until authentication completes, with five-second reminders and automatic session timeouts that can re-lock idle players.
\n– **Session caching** \u2013 Cache active authentications per-server and across proxies to trim database hits and keep trusted players online through quick restarts.
\n– **Book-based prompts** \u2013 Toggle `authentication-input: book` to capture passwords and 2FA codes through an interactive written book, with automatic re-prompts if a player closes it early.
\n– **Celebratory polish** \u2013 Toggle per-event particles and sounds or disable them globally from `security.yml`.
\n– **Flexible storage** \u2013 Choose YAML files, EzAuth-managed MySQL tables, or hook directly into Laravel, WordPress, and XenForo schemas via the new integration block while still storing accounts by UUID or username.
\n– **Configurable hashing** \u2013 Switch between BCrypt (custom rounds), SHA-256 with a pepper, or WordPress PHPass without touching code.
\n– **Email-ready** \u2013 `email.yml` exposes SMTP host, port, TLS\/SSL, credentials, sender identity, and arbitrary mail properties so you’re ready when outbound messaging lands.
\n– **Email verification** \u2013 Send verification codes to new registrations, block unverified logins, and let players confirm or resend their code with `\/email` commands.
\n– **Sensitive command filtering** \u2013 Hide authentication attempts from console logs by listing sensitive commands in `security.yml` so staff chats stay clean while log filters update automatically on reloads.
\n– **Admin oversight** \u2013 `\/ezauth players` opens a paginated in-game GUI with account email, creation time, and 2FA status so staff can disable two-factor or remove registrations without console commands.<\/p>\n
<\/p>\n
## Authentication Types<\/p>\n
– **Login** \u2013 The classic EzAuth flow with `\/register`, `\/login`, and optional `\/2fa` for layered security.
\n– **Standalone 2FA** \u2013 Keep your existing password solution but give players EzAuth’s polished authenticator setup, code checks, and admin controls by setting `authentication-type: two_factor`. Perfect for networks standardising on AuthMe, MultiAuth, or proxy-level SSO that still want in-game TOTP enforcement.
\n– **Optional** \u2013 Let players secure their account when they’re ready while you maintain traditional logins for everyone else.<\/p>\n
## Commands & Permissions<\/p>\n
| Command | Usage | Permission | Default | ## Installation<\/p>\n Launch EzAuth for the first time and let the new installation workflow do the heavy lifting:<\/p>\n 1. Use `\/ezauth install status` to confirm the guided flow is active and view whether the login guard is temporarily bypassed. ## Quick Configuration Presets<\/p>\n Choose the baseline that matches your deployment and copy the snippets into your generated configs.<\/p>\n ### YAML Storage + Password Login<\/p>\n Perfect for single-server setups that don’t need a database. Accounts are saved to disk and BCrypt keeps passwords safe.<\/p>\n “`yaml “`yaml “`yaml ### Managed MySQL + Login<\/p>\n Stores players in EzAuth’s MySQL schema while retaining the classic `\/register` + `\/login` experience.<\/p>\n “`yaml “`yaml “`yaml ### Standalone 2FA Module<\/p>\n Pair EzAuth with another authentication plugin and only use it for `\/2fa` management.<\/p>\n “`yaml “`yaml “`yaml ### WordPress Integration + Shared Accounts<\/p>\n Connect Minecraft logins to your existing WordPress site and sync optional two-factor status.<\/p>\n “`yaml “`yaml “`yaml ## Default Configuration<\/p>\n `database.yml` now includes an `integration` section so you can reuse Laravel, WordPress, or XenForo tables while keeping EzAuth’s familiar commands. Update the table and column names to match your deployment or leave the mode on `none` to keep EzAuth’s managed schema.<\/p>\n “`yaml account-identifier: uuid<\/p>\n yaml-file: registrations.yml<\/p>\n host: localhost integration: WordPress setups need a few extra tweaks before going live:<\/p>\n – Switch `hashing.yml`’s `algorithm` to `WORDPRESS_PHPASS` so EzAuth produces hashes compatible with WordPress’ PHPass implementation. XenForo deployments should create three custom text user fields in the XenForo control panel matching the configured `uuid-field-id`, `two-factor-secret-field-id`, and `two-factor-confirmed-field-id`. EzAuth keeps the values in `xf_user_field_value`, `xf_user_profile.custom_fields`, and `xf_user_authenticate` aligned whenever it updates an account.<\/p>\n Laravel schemas should expose UUID and two-factor columns alongside the framework defaults (`remember_token`, `created_at`, `updated_at`). If you use Jetstream or Breeze, add the following migration so EzAuth can reuse your user table without data loss:<\/p>\n “`php EzAuth keeps the two-factor values intact when it updates an existing Laravel user and will fill in timestamps and the remember token for fresh rows.<\/p>\n ## Hashing defaults<\/p>\n “`yaml ## Security defaults<\/p>\n “`yaml ### Security (2FA-only mode)<\/p>\n “`yaml ## messages.yml (example)<\/p>\n “`yaml prefix: ‘&7[&bEzAuth&7] ‘<\/p>\n register: login: general: admin: twofactor: ## Proxy-aware Session Storage<\/p>\n Need to keep players authenticated across a network of servers? Flip `proxy.enabled: true` inside `security.yml` and EzAuth will automatically switch to a shared SQL-backed session store. The plugin creates the required `ezauth_sessions` table, replicates login state between instances, and honours `proxy.session-ttl-seconds` so you can control how long a network-wide login remains valid before players must authenticate again. Set it to `0` to rely entirely on the per-server timeout defined by `session-timeout-seconds`.<\/p>\n _This proxy support is still experimental, so test thoroughly before rolling it out across production networks._<\/p>\n Heads up: distributed sessions require the MySQL backend defined in `database.yml`. EzAuth will refuse to boot the proxy cache if you're running purely on YAML storage.<\/p>\n ## Preparing Email Notifications<\/p>\n EzAuth now ships with an optional `email.yml` that lets you preload SMTP details ahead of outbound messaging support. Leave the section disabled to skip configuration entirely, or enable it and provide your host, port, transport (TLS\/SSL), credentials, and sender identity so EzAuth is ready the moment email verification or alerts go live.<\/p>\n ```yaml - Keep `enabled` set to `false` until you're ready to wire in valid credentials. ## Connecting EzAuth to Your Website Login<\/p>\n Whether you're running Laravel, WordPress, or XenForo, EzAuth can authenticate players against the same credentials your website already uses. Follow the steps below for your platform after setting `storage-type: mysql`.<\/p>\n ### Laravel Integration<\/p>\n 1. Open `plugins\/EzAuth\/database.yml` and set `integration.mode` to `laravel`. ### WordPress Integration<\/p>\n 1. Set `storage-type` to `mysql` and `integration.mode` to `wordpress`. ### XenForo Integration<\/p>\n 1. Switch `integration.mode` to `xenforo` and supply the same MySQL details XenForo uses. ## Getting Started<\/p>\n 1. Drop the jar into your `\/plugins` folder and start the server once to generate configs. ## Need Help?<\/p>\n EzAuth is in active development, so your feedback directly shapes the roadmap. You can join our Discord server for real-time support, feature requests and updates.<\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" Advanced authentication plugin with 2FA security. Sync your login easily with Xenforo, WordPress or Laravel<\/p>\n","protected":false},"featured_media":67624,"template":"","meta":{"_minecraft_slug":"ezplugins-ezauth","_minecraft_project_id":"ZPkCe20B","_minecraft_author":"Shadow48402","_minecraft_license":"MIT","_minecraft_downloads":90,"_minecraft_follows":0,"_minecraft_client_side":"unsupported","_minecraft_server_side":"required","_minecraft_storage_type":"zip","_minecraft_archive_name":"ezplugins-ezauth.zip","_minecraft_size_bytes":1530667,"_minecraft_version_count":1,"_minecraft_updated_at":"2026-05-15T19:55:44.873412Z","_minecraft_date_created":"2026-01-27T01:54:55.803936Z","_minecraft_date_modified":"2026-01-24T01:15:42.706578Z","_minecraft_project_url":"https:\/\/modrinth.com\/mod\/ezplugins-ezauth","_minecraft_icon_attachment_id":67624,"_minecraft_imported_at":"2026-06-03T20:45:03+00:00","_minecraft_import_hash":"19de0b6dacb476e6438390e5e4f1f74a","_minecraft_versions":"","_minecraft_links":"","_minecraft_gallery":"","_minecraft_api_metadata":""},"mod_category":[124,127,128,129],"mod_loader":[130,132,133,134],"minecraft_version":[62,37,40,41,73,74,38,78,79,80,81,82],"class_list":["post-67623","mod","type-mod","status-publish","has-post-thumbnail","hentry","mod_category-bukkit","mod_category-paper","mod_category-purpur","mod_category-spigot","mod_loader-bukkit","mod_loader-paper","mod_loader-purpur","mod_loader-spigot","minecraft_version-1-21","minecraft_version-1-21-1","minecraft_version-1-21-10","minecraft_version-1-21-11","minecraft_version-1-21-2","minecraft_version-1-21-3","minecraft_version-1-21-4","minecraft_version-1-21-5","minecraft_version-1-21-6","minecraft_version-1-21-7","minecraft_version-1-21-8","minecraft_version-1-21-9"],"yoast_head":"\n
\n|—|—|—:|—|
\n| \/register | \/register
\n| \/login | \/login
\n| \/2fa, \/twofactor | \/2fa
\n| \/email | \/email
\n| – | – | `ezauth.2fa.admin` | OP |
\n| \/ezauth | \/ezauth reload | `ezauth.reload` | OP |
\n| \/ezauth install | \/ezauth install
\n| – | – | `ezauth.bypass` | OP |<\/p>\n
\n2. Tweak installation options in-game with `\/ezauth install config` to enable reminders, disable bypass mode, or re-open the GUI later.
\n3. Once your storage, hashing, and security files look right, finish with `\/ezauth install complete` to re-lock every connected player until they authenticate.
\n4. Need to re-run onboarding for a new season? `\/ezauth install reset` re-opens the flow without touching existing accounts.<\/p>\n
\n# database.yml
\nstorage-type: yml
\naccount-identifier: uuid
\nyaml-file: registrations.yml
\nintegration:
\n mode: none
\n“`<\/p>\n
\n# hashing.yml
\nalgorithm: bcrypt
\nbcrypt:
\n rounds: 10
\n“`<\/p>\n
\n# security.yml
\nauthentication-type: login
\nparticles-enabled: false
\nsounds-enabled: false
\n“`<\/p>\n
\n# database.yml
\nstorage-type: mysql
\naccount-identifier: uuid
\nhost: localhost
\nport: 3306
\nname: ezauth
\nusername: ezauth
\npassword: changeme
\njdbc-parameters: useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
\nintegration:
\n mode: none
\n“`<\/p>\n
\n# hashing.yml
\nalgorithm: bcrypt
\nbcrypt:
\n rounds: 12
\n“`<\/p>\n
\n# security.yml
\nauthentication-type: login
\nsession:
\n timeout-minutes: 15
\nparticles-enabled: true
\nsounds-enabled: true
\n“`<\/p>\n
\n# database.yml
\nstorage-type: mysql
\naccount-identifier: uuid
\nhost: localhost
\nport: 3306
\nname: ezauth
\nusername: ezauth
\npassword: changeme
\njdbc-parameters: useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
\nintegration:
\n mode: none
\n“`<\/p>\n
\n# hashing.yml
\n# Hashing is unused in standalone 2FA mode but keep defaults for compatibility.
\nalgorithm: bcrypt
\nbcrypt:
\n rounds: 10
\n“`<\/p>\n
\n# security.yml
\nauthentication-type: two_factor
\ntwo-factor:
\n standalone-mode: true
\n enforce-on-join: true
\nsession:
\n timeout-minutes: 10
\n“`<\/p>\n
\n# database.yml
\nstorage-type: mysql
\naccount-identifier: username
\nhost: localhost
\nport: 3306
\nname: wordpress
\nusername: wp_user
\npassword: supersecret
\njdbc-parameters: useSSL=false&characterEncoding=UTF-8
\nintegration:
\n mode: wordpress
\n wordpress:
\n table-prefix: wp_
\n users-table: wp_users
\n user-meta-table: wp_usermeta
\n username-column: user_login
\n email-column: user_email
\n password-column: user_pass
\n uuid-meta-key: minecraft_uuid
\n two-factor-secret-meta-key: ezauth_2fa_secret
\n two-factor-confirmed-meta-key: ezauth_2fa_confirmed
\n“`<\/p>\n
\n# hashing.yml
\nalgorithm: wordpress
\n“`<\/p>\n
\n# security.yml
\nauthentication-type: login
\ntwo-factor:
\n optional: true
\nlocale:
\n default-language: en_US
\n“`<\/p>\n
\n# EzAuth Storage Configuration
\nstorage-type: yml<\/p>\n
\nport: 3306
\nname: ezauth
\nusername: root
\npassword: password
\njdbc-parameters: useSSL=false&allowPublicKeyRetrieval=true&serverTimezone=UTC
\npool:
\n maximum-pool-size: 10
\n minimum-idle: 2
\n connection-timeout: 30000
\n idle-timeout: 600000
\n max-lifetime: 1800000
\n data-source-properties:
\n cachePrepStmts: “true”
\n prepStmtCacheSize: “250”
\n prepStmtCacheSqlLimit: “2048”<\/p>\n
\n mode: none
\n laravel:
\n table: users
\n uuid-column: uuid
\n username-column: name
\n email-column: email
\n password-column: password
\n two-factor-secret-column: two_factor_secret
\n two-factor-confirmed-column: two_factor_confirmed
\n created-at-column: created_at
\n updated-at-column: updated_at
\n remember-token-column: remember_token
\n wordpress:
\n table-prefix: wp_
\n users-table: wp_users
\n user-meta-table: wp_usermeta
\n username-column: user_login
\n email-column: user_email
\n password-column: user_pass
\n created-at-column: user_registered
\n uuid-meta-key: minecraft_uuid
\n two-factor-secret-meta-key: ezauth_two_factor_secret
\n two-factor-confirmed-meta-key: ezauth_two_factor_confirmed
\n xenforo:
\n table-prefix: xf_
\n user-table: xf_user
\n user-auth-table: xf_user_authenticate
\n user-field-value-table: xf_user_field_value
\n user-profile-table: xf_user_profile
\n username-column: username
\n email-column: email
\n created-at-column: register_date
\n uuid-field-id: minecraft_uuid
\n two-factor-secret-field-id: ezauth_two_factor_secret
\n two-factor-confirmed-field-id: ezauth_two_factor_confirmed
\n“`<\/p>\n
\n– Keep the UUID and two-factor meta keys (`minecraft_uuid`, `ezauth_two_factor_secret`, `ezauth_two_factor_confirmed` by default) or adjust them to match your existing data.
\n– Update the table prefix or table names if your WordPress instance uses a custom prefix.<\/p>\n
\n\/\/ Laravel migration
\nSchema::table(‘users’, function (Blueprint $table) {
\n $table->uuid(‘uuid’)->unique()->after(‘id’);
\n $table->text(‘two_factor_secret’)->nullable()->after(‘password’);
\n $table->boolean(‘two_factor_confirmed’)->default(false)->after(‘two_factor_secret’);
\n});
\n“`<\/p>\n
\n# hashing.yml
\nalgorithm: BCRYPT
\nbcrypt:
\n rounds: 10
\nsha256:
\n pepper: “”
\n“`<\/p>\n
\n# security.yml
\nrequire-email-validation: true
\nmin-password-length: 8
\nsession-timeout-seconds: 300
\nlogin-enabled: true
\nregister-enabled: true
\nbypass-enabled: true
\nlogin:
\n cooldown:
\n enabled: true
\n stages:
\n – attempts: 3
\n cooldown-seconds: 10
\n – attempts: 5
\n cooldown-seconds: 60
\ntwo-factor:
\n enabled: false
\n issuer: EzAuth
\n required-for-login: false
\n secure-account-welcome-message:
\n – “%prefix%&aTwo-factor authentication is now enabled for your account, %player%!”
\nallowed-commands-while-unauthenticated:
\n – login
\n – register
\n – 2fa
\n – twofactor
\nvisual-effects:
\n enabled: true
\n login:
\n enabled: true
\n particle: VILLAGER_HAPPY
\n particle-count: 30
\n particle-offset-x: 0.0
\n particle-offset-y: 1.0
\n particle-offset-z: 0.0
\n particle-spread-x: 0.25
\n particle-spread-y: 0.35
\n particle-spread-z: 0.25
\n sound: ENTITY_PLAYER_LEVELUP
\n sound-volume: 1.0
\n sound-pitch: 1.2
\n register:
\n enabled: true
\n particle: FIREWORKS_SPARK
\n particle-count: 50
\n particle-offset-x: 0.0
\n particle-offset-y: 1.0
\n particle-offset-z: 0.0
\n particle-spread-x: 0.4
\n particle-spread-y: 0.6
\n particle-spread-z: 0.4
\n sound: UI_TOAST_CHALLENGE_COMPLETE
\n sound-volume: 1.0
\n sound-pitch: 1.0
\n“`<\/p>\n
\n# EzAuth Security Configuration (2FA-only mode)
\nrequire-email-validation: false
\nmin-password-length: 8
\nsession-timeout-seconds: 0
\nlogin-enabled: false
\nregister-enabled: false
\nbypass-enabled: false
\nlogin:
\n cooldown:
\n enabled: false
\n stages: []
\ntwo-factor:
\n enabled: true
\n issuer: EzAuth
\n required-for-login: false
\n secure-account-welcome-message:
\n – “%prefix%&aTwo-factor authentication is now enabled for your account, %player%!”
\nallowed-commands-while-unauthenticated:
\n – 2fa
\n – twofactor
\nvisual-effects:
\n enabled: false
\n“`<\/p>\n
\n# messages.yml
\ndefault-language: en
\nlanguages:
\n en:
\n name: ‘English’
\n file: ‘messages\/en.yml’
\n aliases:
\n – ‘en_us’
\n – ‘en-gb’
\n nl:
\n name: ‘Nederlands’
\n file: ‘messages\/nl.yml’
\n aliases:
\n – ‘nl_nl’
\n – ‘nl-be’
\n es:
\n name: ‘Espa\u00f1ol’
\n file: ‘messages\/es.yml’
\n aliases:
\n – ‘es_es’
\n – ‘es-mx’<\/p>\n
\n usage: ‘%prefix%&cUsage: \/register
\n success: ‘%prefix%&aYou are now registered with &f%email%&a. Welcome!’
\n already-registered: ‘%prefix%&cYou are already registered. Use \/login
\n email-in-use: ‘%prefix%&cThat email address is already associated with another account.’
\n invalid-email: ‘%prefix%&cPlease enter a valid email address.’
\n password-mismatch: ‘%prefix%&cYour passwords do not match.’
\n password-too-short: ‘%prefix%&cPasswords must be at least &f%length%&c characters long.’
\n prompt: ‘%prefix%&eCreate an account with &f\/register
\n disabled: ‘%prefix%&cRegistration is currently disabled. Please contact an administrator to create an account.’<\/p>\n
\n usage: ‘%prefix%&cUsage: \/login
\n success: ‘%prefix%&aYou are now logged in.’
\n success-with-email: ‘%prefix%&aYou are now logged in with &f%email%&a.’
\n not-registered: ‘%prefix%&cNo account found. Use \/register
\n invalid-password: ‘%prefix%&cIncorrect password. Please try again.’
\n already-logged-in: ‘%prefix%&cYou are already logged in.’
\n cooldown-active: ‘%prefix%&cToo many failed attempts. Please wait &f%seconds%&c seconds before trying again.’
\n prompt: ‘%prefix%&eWelcome back! Log in with &f\/login
\n bypass: ‘%prefix%&aBypass enabled: you are already authenticated.’
\n disabled: ‘%prefix%&ePassword login is currently disabled on this server.’<\/p>\n
\n no-permission: ‘%prefix%&cYou do not have permission to use this command.’
\n players-only: ‘%prefix%&cOnly players can run this command.’
\n error: ‘%prefix%&cAn internal error occurred. Please contact an administrator.’
\n not-authenticated: ‘%prefix%&cPlease authenticate using %methods%.’
\n already-authenticated: ‘%prefix%&cYou are already authenticated.’<\/p>\n
\n reload:
\n usage: ‘%prefix%&eUsage: \/ezauth reload’
\n success: ‘%prefix%&aEzAuth configuration reloaded successfully.’
\n failed: ‘%prefix%&cFailed to reload EzAuth configuration. Check console for details.’<\/p>\n
\n disabled: ‘%prefix%&cTwo-factor authentication is not enabled on this server.’
\n usage: ‘%prefix%&eUsage: \/2fa
\n confirm-usage: ‘%prefix%&cUsage: \/2fa confirm '
\n verify-usage: '%prefix%&cUsage: \/2fa verify '
\n disable-usage: '%prefix%&cUsage: \/2fa disable
\n setup: '%prefix%&aAdd this account to your authenticator app using the secret or setup URL below.'
\n secret-line: '%prefix%&7Secret: &b&n%secret% &8(Click to copy)'
\n secret-hover: '&bClick to copy your 2FA secret to the clipboard.'
\n uri-line: '%prefix%&7Setup URL: &f%uri%'
\n already-enabled: '%prefix%&cTwo-factor authentication is already enabled.'
\n setup-required: '%prefix%&cYou must set up two-factor authentication with &f\/2fa setup&c before continuing.'
\n setup-optional: '%prefix%&eSecure your account any time with &f\/2fa setup&e when you are ready.'
\n login-required: '%prefix%&cEnter a valid 2FA code using &f\/2fa verify &c to finish signing in.'
\n auth-required: '%prefix%&cPlease log in with &f\/login&c before using \/2fa commands.'
\n invalid-code: '%prefix%&cThat 2FA code is invalid or expired. Please try again.'
\n enabled: '%prefix%&aTwo-factor authentication has been enabled successfully.'
\n verified: '%prefix%&aTwo-factor authentication complete. You are now signed in.'
\n disabled-success: '%prefix%&aTwo-factor authentication has been disabled for your account.'
\n admin-disabled-success: '%prefix%&aTwo-factor authentication has been disabled for &f%target%&a.'
\n admin-disabled-notify: '%prefix%&cYour two-factor authentication has been disabled by &f%admin%&c.'
\n admin-self-target: '%prefix%&cTo disable your own two-factor authentication, run &f\/2fa disable &c.'
\n admin-target-not-found: '%prefix%&cNo EzAuth account found for &f%target%&c.'
\n admin-target-not-enabled: '%prefix%&cTwo-factor authentication is not enabled for &f%target%&c.'
\n not-setup: '%prefix%&cYou have not generated a two-factor secret yet. Use \/2fa setup first.'
\n not-confirmed: '%prefix%&cYou must confirm your two-factor secret with \/2fa confirm before using it.'
\n not-enabled: '%prefix%&cTwo-factor authentication is not currently enabled for your account.'
\n no-account: '%prefix%&cNo EzAuth account found for your player. Please register first.'
\n status-enabled: '%prefix%&aTwo-factor authentication is enabled on your account.'
\n status-pending: '%prefix%&eTwo-factor authentication setup is pending confirmation.'
\n status-disabled: '%prefix%&eTwo-factor authentication is currently disabled for your account.'
\n```<\/p>\n
\nsmtp:
\n enabled: false
\n host: smtp.example.com
\n port: 587
\n username: no-reply@example.com
\n password: \"changeme\"
\n use-starttls: true
\n from-name: \"EzAuth\"
\n from-address: no-reply@example.com
\n```<\/p>\n
\n- Toggle `use-starttls` or swap to implicit SSL by setting `port` to `465` if your provider requires it.
\n- Pair email notifications with the verification commands under `\/email` to block unverified accounts before they log in.<\/p>\n
\n2. Point the MySQL connection settings at the database your Laravel site uses (usually the values from `.env`).
\n3. Ensure the column names in the `integration.laravel` block match your `users` table. If you use UUIDs, keep `uuid-column`; otherwise set `account-identifier` to `username`.
\n4. If you rely on Laravel's remember tokens or two-factor columns, keep them mapped\u2014EzAuth reads and updates them automatically when players log in or toggle `\/2fa`.
\n5. Reload EzAuth or restart the server. New registrations will write back through Laravel's hashing (BCrypt) so the same password works on both the site and Minecraft server.<\/p>\n
\n2. Use the database credentials from `wp-config.php` so EzAuth connects to the same MySQL instance as WordPress.
\n3. Adjust `integration.wordpress.table-prefix` if your installation uses a custom prefix, then confirm the `users` and `usermeta` table names.
\n4. Map EzAuth's UUID and 2FA fields to meta keys that exist (or let EzAuth create them). Passwords are checked using WordPress' PHPass algorithm when you enable `hashing.algorithm: wordpress` in `hashing.yml`.
\n5. Reload EzAuth. Players can now `\/login` with their WordPress credentials, and optional `\/2fa` status will sync to the user meta rows.<\/p>\n
\n2. Confirm the table prefix and column names in the `integration.xenforo` block. EzAuth will read usernames from `xf_user` and hashed passwords from `xf_user_authenticate`.
\n3. If you store Minecraft UUIDs or 2FA secrets in custom profile fields, update the `uuid-field-id` and `two-factor-*` identifiers so EzAuth syncs the correct values.
\n4. Make sure `hashing.yml` is set to `algorithm: xenforo` so EzAuth verifies XenForo's bcrypt variants correctly.
\n5. Reload EzAuth or restart to apply changes. Server logins will now validate against XenForo accounts, keeping forum and in-game credentials unified.<\/p>\n
\n2. Edit `database.yml`, `hashing.yml`, and `security.yml` to match your storage, hashing, and policy.
\n3. Configure `email.yml` if you plan to send email-based notifications later.
\n4. Tune `messages.yml` to fit your community tone, then run `\/ezauth reload` in-game.
\n5. Invite players to `\/register`, `\/login`, and optionally `\/2fa setup` for full protection.<\/p>\n