GateKeeper
Protect your server with a secret key system. Instead of a traditional whitelist, GateKeeper requires players to enter a password when joining from an unrecognized IP — keeping unwanted visitors out without banning accounts.
How It Works
- When a player joins from an unknown IP, they are prompted to enter the secret key in chat
- Their input is hidden from other players and they are frozen in place until authenticated
- Once authenticated, their IP is trusted for a configurable period (default: 30 days)
- If they return on the same IP within that period, they get in with no prompt
- If they join from a new IP, they must authenticate again
Failed Attempts
- Players get a configurable number of attempts (default: 5)
- Exceeding the limit results in an IP ban — the player account itself is never banned
- Ban duration is configurable, or set to permanent
Features
- 🔑 Secret key authentication on join
- 🌐 Per-player trusted IP storage with expiry
- 🚫 IP ban on too many failed attempts
- ⛏️ Mining Fatigue 255 applied while unauthenticated
- 🔒 Movement and commands blocked until authenticated
- ⚙️ Fully configurable via
config.yml
Configuration
secret-key: "changeme123"
max-attempts: 5
ban-duration-minutes: 60 # 0 = permanent
trusted-ip-expiry-days: 30 # 0 = never expire, 7 = one week
kick-message: "Too many failed attempts. Your IP has been banned."
prompt-message: "§eEnter the server secret key in chat:"
wrong-message: "§cWrong key. Attempts remaining: %attempts%"
success-message: "§aAuthenticated! Welcome."
Requirements
- Paper / Spigot 1.20+
- Java 17
Made by flintify
