Most authentication plugins make you pick a side. Run online-mode: true and
every player without a Minecraft account is turned away. Run offline and you
have to ask everybody for a password — including the people who already own
the account they are connecting with.
rLogin does neither. It verifies premium accounts against Mojang itself and
lets them straight in, while everyone else registers with a password as usual.
Premium players
Verified against Mojang and let in with no password, no commands —
carrying their real UUID and skin.
Everyone else
/register once, /login after that. Frozen in place until they do.Why the UUID matters
Plenty of plugins can wave a premium player through. Far fewer give them the UUID Mojang actually issued them. On an offline server the UUID is normally derived from the name, so “Notch” is whoever typesNotch — and if you later switch the server to online mode,
every permission, balance and ban is attached to the wrong identity. rLogin
hands the connection the genuine profile it got back from Mojang, exactly as a
proxy would, so your other plugins see the same UUID they would on any
online-mode server.
That is uuid-type: real, and it is
the default.
You can turn it off. Servers with an existing offline-mode world often prefer
uuid-type: cracked, which keeps everyone on the UUID they already have
while still skipping the password for premium players.Where it runs
Standalone
One Paper server,
online-mode: false. rLogin does the Mojang verification
itself — this is the setup that needs
PacketEvents.Behind a proxy
Velocity verifies, the backend trusts it. No PacketEvents needed —
the same jar runs on the proxy.
Folia
Supported from day one. Every scheduled task uses the regional schedulers,
never Bukkit’s global one.
What else is in the box
17 languages
Every message players see, translated and editable.
Two-factor auth
TOTP through any authenticator app. Players opt in themselves.
Remember me
A quick reconnect from the same address doesn’t ask again.
Brute-force protection
Escalating lockouts by address — never by account.
Spawn points
Separate spawns for joining, first join, logging in and registering.
AuthMe import
Bring your existing accounts across, hashes included.
Get going
Installation
One jar, one conditional dependency, no configuration. Download it from
Hangar.