KatIPAuth: The IP-Locking Plugin for Minecraft 1.21.x
Running a Minecraft server means constantly balancing fun with security. You want players to jump in and start crafting without friction, but you also need to keep out the little gremlins who try to hijack accounts. KatIPAuth (KIA) is a Paper plugin that takes a radically simple approach: instead of passwords or complex authentication systems, it locks each player account to their IP address. If the IP doesn’t match, the login is blocked before they even spawn. No drama, no chunk loading, no unfair achievement stealing. It’s built for speed, fully asynchronous, and won’t freeze your server like some plugins on Spigot.
Why IP Binding Beats Passwords for Some Servers
Traditional auth plugins like AuthMe rely on players remembering passwords. That’s fine for public networks, but many private or semi-private servers suffer from a different problem: account theft. Once a player’s Minecraft account is compromised, the thief can log in, grab all the diamond blocks, and ruin months of progress. KatIPAuth flips the script. On first join, the plugin silently records the player’s IP. Every subsequent login must come from that same address. If a hacker tries to connect from a different location, the plugin instantly denies entry and fires off a Discord alert. It’s identity locking without any extra steps for your community.
Core Behavior: How KatIPAuth Works
The logic is dead simple. When a new player joins, their username and current IP are saved. On future joins, the plugin checks the incoming IP against the stored one. If they match, the player enters normally. If they don’t, three things happen:
- Login is blocked immediately, before the player even loads into the world.
- A clean Discord webhook embed is sent to your staff channel, showing the username, stored IP, attempted IP, timestamp, and server name.
- The intruder stays out. No spawn, no chunks, no funny business.
This all runs asynchronously. Disk reads/writes and webhook requests never touch the main server thread, so performance stays buttery smooth even during peak hours. For server owners who love tinkering with mods and plugins, the foxygame.net launcher provides a modern, flexible way to manage your entire setup. You can browse and install KatIPAuth right from its menu, keeping your server tools organized without digging through endless forum pages.
Feature Breakdown
Player Protection
- Automatic IP binding on first join – zero setup for players.
- Instant login block on IP mismatch, preventing any world interaction.
- Privacy-focused: the /ipstatus command shows binding status and time but never reveals the actual IP to the player.
Discord Alerts with Clean Embeds
No ugly spam messages. KatIPAuth sends a structured embed that includes the player’s name, stored IP, attempted IP, timestamp, and server name. You can watch account theft attempts unfold like a Netflix series, all from your Discord server. The webhook is fully configurable, and you can reload it without restarting the server.
Performance First
- All I/O operations (reading/writing IP data) are asynchronous.
- Webhook requests are sent off the main thread.
- Safe on server restarts and reloads – no data corruption.
Commands for Players and Admins
KatIPAuth keeps the command list short and intuitive. Players get two self-service commands, while admins have three powerful tools (all OP-restricted).
Player Commands
- /ipreset – Resets your IP binding. You’ll be kicked instantly, and the next login will bind the new IP. Perfect if you move or switch ISPs.
- /ipstatus – Shows whether your IP is bound and the date/time of binding. No IP leakage, so your privacy stays intact.
Admin Commands
- /ipinfo – Displays the stored IP and last bind/login time for a player. Useful for investigating suspicious activity.
- /ipforce – Removes the current IP binding and forces the next join to rebind. No need to kick the player manually.
- /ipreload – Reloads the config and Discord webhook settings on the fly. No server restart required.
Configuration: Simple and Clean
The plugin’s config.yml lives in plugins/KatIPAuth/config.yml and requires only two things: your Discord webhook URL and a custom blocked message. The default blocked message is “&cLogin blocked: IP mismatch. Contact staff if this is wrong.” You can colorize it with standard Minecraft formatting codes. That’s it. No bloated permission nodes, no database setup. Just drop the plugin into your Paper 1.21.x server, set the webhook, and you’re protected.
Frequently Asked Questions
Can VPNs bypass KatIPAuth?
VPN users will get blocked unless they reset their IP via /ipreset. That’s exactly the point – the plugin treats any IP change as a potential threat. If a legitimate player uses a VPN, they can simply reset and rebind.
Can two players share the same IP?
Absolutely. The binding is IP-to-username, not the other way around. Siblings or roommates on the same network can each have their own bound account without issues.
Is KatIPAuth better than AuthMe?
They serve different goals. AuthMe adds password authentication, which is great for public servers. KatIPAuth provides identity locking via IP, ideal for private communities or as an extra layer on top of existing auth. You can even use both if you’re feeling paranoid.
Final Thoughts: A Lightweight Shield for Your Server
KatIPAuth isn’t trying to be a full authentication suite. It’s a focused, high-performance tool that solves one problem exceptionally well: preventing stolen accounts from wreaking havoc. The async design means you won’t notice any lag, and the Discord alerts turn security into a spectator sport. Whether you run a small SMP with friends or a larger whitelisted network, this plugin adds a silent, sturdy lock on every player’s identity. Pair it with your favorite mods and management tools – and if you’re using a modern launcher like foxygame.net, you can keep everything updated and installed in one place – to build a server that’s both welcoming and secure. In a blocky world where trust is hard to come by, KatIPAuth makes sure only the right IPs get to place the next block.