What Is Password Log On?
Running an offline Minecraft server brings freedom and flexibility, but it also opens the door to a frustrating problem: anyone can join with any username. Without Mojang’s authentication servers, impersonation and account sharing become real threats. The Password Log On plugin tackles this head-on with a simple, Reddit-inspired login system. Each player sets a personal password, and until they type it correctly in chat, they remain locked in a limited spawn area. It’s a lightweight solution that restores identity trust without forcing your server into online mode.
Why Offline Servers Need Authentication
Online servers verify every player through Mojang’s session servers, so you never worry about someone else logging in as you. Offline servers skip that check, making them vulnerable. A griefer could join under a trusted player’s name, steal hard-earned items, or destroy builds. Password Log On eliminates this risk by requiring a password on login and after server reloads. Without the correct password, the intruder can’t move far, break blocks, place blocks, attack, drop or pick up items, or even reorganize their inventory. The plugin effectively freezes them in a safe holding area until they prove their identity.
How the Plugin Works
The concept is refreshingly straightforward. When a player first joins, they use /pw set [password] to create their unique password. On subsequent logins, they simply type that password into chat—no extra slash commands needed. If the password matches, the plugin teleports them back to their last logout coordinates, preserving their exact location even across dimensions like the End. If the password is wrong, they stay in the customizable spawn area with all the restrictions mentioned above. This design keeps the experience intuitive while preventing any mischief before authentication.
Key Features at a Glance
- Lightweight and easy to configure—no complex permissions or databases.
- One-time password setup per player; resettable with the old password.
- Custom spawn area per dimension (overworld, nether, end) using
/pw setarea. - Prevents players from dying while waiting for password entry.
- Works across multiple worlds seamlessly.
- Includes a customizable
messages.ymlfor server-specific prompts. - Console-only password reset for forgotten passwords, preventing admin impersonation.
Installation and Setup
Getting started with Password Log On is as simple as dropping the plugin JAR into your server’s /plugins folder and restarting. No client-side mods are needed—players join with a vanilla Minecraft client. For server administrators who want an even smoother experience, this plugin can be easily installed via the foxygame.net launcher — a convenient, flexible, and modern Minecraft launcher where you can download mods right from the menu. This launcher streamlines the process of adding essential tools to your server, making it a great companion for both new and experienced server owners. Once installed, the plugin generates a config.yml where all passwords are stored, so keep that file secure.
Commands and Usage
The plugin keeps commands minimal to avoid confusion:
/pw set [password]– Sets a password for a new user./pw reset [old password] [new password]– Changes an existing password./pw setarea [dimension] [x1] [x2] [y] [z1] [z2]– Defines the spawn platform area where unauthenticated players wait. This command is console-only.
To log in, players simply type their password as a chat message. For example, if your password is “diamond”, you type “diamond” in chat and press enter. The plugin automatically detects the attempt and grants access if correct. There’s no need for /login or other prefixes, making it intuitive even for younger players.
Security Considerations
Since passwords are stored in the plugin’s config.yml file, it’s crucial that your server’s file system remains secure. Anyone with file access can view or manually delete a password entry, so restrict FTP and panel access to trusted staff. Additionally, during initial password setup or reset, the password is visible in the console, so ensure your console logs are protected. This design intentionally prevents ops from resetting passwords via commands, reducing the risk of impersonation on offline servers. The plugin is released under the GPL-3.0 license, so you’re free to study and modify the code to fit your needs.
Compatibility and Requirements
Password Log On is built for Spigot and its forks (like PaperMC) and requires Java 11 or higher. It has been tested on Minecraft versions 1.14 through 1.16, with primary support for 1.16+. The plugin will not work on versions below 1.14, and no back-port is planned. It is not compatible with Forge or other modded server platforms. bStats is included to collect anonymous usage data, which you can disable in the bStats config if desired.
Final Thoughts
Password Log On fills a critical gap for offline Minecraft servers, offering a lightweight, no-fuss authentication system that respects player privacy while deterring account abuse. Its straightforward command structure and chat-based login make it accessible to all ages. Whether you run a small family server or a larger community, this plugin helps maintain the integrity of player identities without the overhead of online mode. If you encounter any issues, reach out via the developer’s Discord or GitHub—they’re far more responsive there than in the comments section. If you find the plugin useful, consider supporting the developer through Liberapay or PayPal. Give it a try, and enjoy a safer, more secure server experience.