UserEncrypt
Secure Your Offline-Mode Server and Prevent Username Theft!
Running an "offline-mode" Minecraft server comes with a critical vulnerability: anyone can join using any username, including an administrator's. UserEncrypt is a lightweight, powerful plugin designed to eliminate this risk, ensuring the security and integrity of your server community.
The Problem
On offline servers without Mojang or Microsoft authentication, player accounts are susceptible to impersonation. A malicious user could log in with your admin username, gain full control, and cause irreversible damage. Your players' inventories and progress are also at risk from impersonators.
The Solution
UserEncrypt tackles this problem head-on by assigning each player a unique, irreversible username on their first login. This ensures that a player's identity is permanently secured, preventing anyone else from logging in as them.
For example, a player named "batman" might be permanently assigned the username "bat7852". In-game, they will always be known as "bat7852". If another person tries to connect as "batman", the plugin will recognize that the original player is already registered with a unique ID, effectively blocking the impersonation attempt.
Features
- Username Encryption: The core feature automatically transforms a player's original username into a unique and un-guessable alias. This new, secure username is consistently applied every time the player joins.
- Unique Username Storage Mode: As an alternative, you can assign a unique, human-readable username to each player, which is then stored in a database. This offers a more user-friendly approach while maintaining the same robust level of security.
Why Choose UserEncrypt?
- Prevent Username Theft: The primary goal of UserEncrypt is to eliminate the risk of impersonation, especially of server operators with elevated privileges.
- Enhanced Security: By providing a reliable solution to a critical security flaw, UserEncrypt creates a more stable and secure environment for your server.
- Player Safety: Protect your players' inventories, progress, and identities from would-be thieves and griefers.
- Peace of Mind: Server owners and administrators can manage their communities without the constant fear of their accounts being compromised.
A Word from a Server Owner
"Running an offline server always came with the constant worry of someone logging in with my admin username. Since installing UserEncrypt, that fear is gone. My players feel safer knowing their inventories and progress are protected from impersonators, and my staff can manage the server without the risk of their accounts being compromised. It's an essential plugin for any offline-mode server that is serious about security and player safety."
Technical Details
- Core Language: Kotlin
- Build Tool: Gradle
- Proxy Support: Velocity
- Version Control: Open-source and managed on Git & GitHub.
