zAuth is a lightweight, secure, and highly customizable authentication plugin designed for offline-mode and Geyser/Floodgate servers. Built for performance and security, zAuth protects your players from account theft, password guessing, and session hijacking.
Whether you're running a small SMP or a large network, zAuth gives you enterprise-grade login protection with smooth UX.
🔐 Key Features ✅ Secure Login & Registration
+/register
+/login
+/changepassword
+/logout
Passwords are stored using BCrypt (industry-grade hashing).
🛡 Account Protection
Account lock after X failed attempts
Automatic unlock after configured cooldown
IP-trust system (optional)
Session manager prevents re-login abuse
Freeze players completely until authenticated
**👀 Player Visibility & Mob Safety ** Hide ALL players from each other until they login
Disable mob targeting and damage before login
Bossbar reminder
Safe login teleport location
Optional: Allow players to set /spawnlogin
🔏 Privacy Protection
Password masking in:
Chat logs
Console
Command logs
Commands like /login, /register, /changepassword NEVER reveal real passwords.
