ULTIMATE AUTH

UltimateAuth

UltimateAuth is a secure, performance‑first authentication plugin for offline‑mode servers (Spigot, Bukkit, Paper, Purpur 1.21+). It delivers a clean login/register experience while completely locking down unauthenticated players to prevent impersonation, grief, and unauthorized access.

Whether you run a small SMP or a large network, UltimateAuth ensures every player verifies before they can move, interact, or play — and everything is fully configurable with full Hex and Legacy Color support.

Features

✔ Full Authentication Lockdown

Unauthenticated players cannot:

• Move or rotate their aim
• Use commands (except /register, /login)
• Break or place blocks
• Interact with the world or drop/pickup items
• Chat

Optional protections:

• Auth timeout with automatic kick
• Persistent Title and Action bar prompts during auth

✔ Advanced Ban System

UltimateAuth includes a built-in moderation system specifically designed to handle rule-breakers efficiently:

• Issue permanent bans with custom reasons.
• Issue temporary bans with exact durations (days, months, years).
• Easily revoke bans.

✔ Security & Anti‑Abuse Tools

• IP‑Based Registration Limits: Prevent players from registering too many accounts from a single IP.
• Join Rate Limiting: Built-in join throttling to prevent bot attacks.
• Brute‑Force Protection: Limits maximum failed login/register attempts before kicking the user to prevent password guessing.
• BCrypt Hashing: All passwords are securely hashed using jBcrypt.

✔ Fully Configurable

Every major feature, string, and layout can be toggled and tuned:

• config.yml - Configure timeouts, IP limits, and database settings (SQLite supported).
• messages.yml - Customize every single message, title, and kick screen using either modern MiniMessage formatting (e.g., <red>, <gradient>) or Legacy/Hex Color Codes (e.g., &a, &#00fbff).

Commands & Permissions

Player Commands

Admin Commands

Server Ip