rLogin

Premium players join without typing anything. Everyone else logs in with a password.

  

   

Most authentication plugins make you choose: run online-mode: true and lose every player without an account, or run offline and ask everybody for a password — the owners of real accounts included.

rLogin does neither. It verifies premium accounts against Mojang itself, so they are let straight in with their genuine UUID and skin, while everyone else registers with a password as usual. It works the same on a single server as it does behind a proxy, and 17 languages ship with it.

One download, rLogin-<version>.jar, runs on all of them: the same file goes into a Paper/Folia server's plugins/ and into a Velocity proxy's. Velocity 3.x and 4.x both work. Velocity is the only proxy rLogin has a plugin for — a backend behind BungeeCord will detect the forwarding and stop double-verifying, but nothing routes the login, so players are asked again on every server switch.

• Real Mojang UUIDs and skins on a standalone online-mode: false server
• Password login for everyone else — frozen in place until they register
• Two-factor authentication (TOTP) through any authenticator app
• "Remember me" sessions, so a quick reconnect doesn't ask again
• Brute-force protection with escalating lockouts by address, never by account
• Premium name protection — cracked players can't claim a real account's name
• Passwords never reach your logs, and that is not a setting anyone can turn off
• 17 languages, every message editable
• Spawn points for joining, first join, logging in and registering
• Bedrock support through Geyser/Floodgate
• AuthMe import, hashes included
• MySQL or SQLite

1. Drop rLogin-<version>.jar into plugins/ on every server, proxy included.
2. Set online-mode=false — in server.properties, and in velocity.toml if you run a proxy.
3. Standalone? Install PacketEvents next to it.
4. Start. There is nothing else to configure.

rLogin refuses every connection when these disagree, and says so — a silent half-working server is worse than one that won't start.

With online-mode on, the server or proxy turns away every player without a Minecraft account before rLogin is consulted at all. On a server built for those players that is the whole audience gone.

Every setting, all commands and permissions, and troubleshooting: pyrelight.mintlify.app

Join the Discord and we will help you out, or open a GitHub issue.

rLogin is free, and stays free, so that any server can use it. If it saved you some trouble and you would like to say thanks, a donation helps keep the work going.

Thanks to the following sponsor for supporting this project:

MIT © Raimond Arias. PacketEvents is a separate GPL-3.0 plugin that rLogin talks to at runtime; it is never bundled.