SecureMyAccount

Description

Inspired by Github and Google, here is a Bukkit plugin to use two factor authentication. Your Mojang/Minecraft account is protected by a single password or login token. What happens if your account gets stolen? Therefore this plugin exists.

The password is time based and generated by your smartphone completely independent from your Mojang account and your computer. This makes your account safer, because other hackers would have to hack your account and your smartphone. This method is also known as 2FA.

If you like the Projects

Please leave a star on Github here: https:github.com/TuxCoding/SecureMyAccount

Features

Protect selected commands
Provides a better security to your server
Displays the QR on a minecraft map
User friendly. They just need to scan the QR code with their smartphone
A session will be valid for certain time period so you don't have to enter your password again.
No other plugins required

Commands

/secureme - Requests a new secret key
/session <code> - Starts a new session to prove your identity

Permissions

securemyaccount.command.request - Permission to invoke the request command
securemyaccount.command.start - Permission to start a new session

Images

Minecraft ingame QR code App password generation

Source code

You don't have to decompile the plugin. You can find there the source code with comments and building utilities.
SecureMyAccount is open source and hosted on GitHub; feel free to fork, star, or contribute by making pull requests and opening issues.

https://github.com/TuxCoding/SecureMyAccount

Requirements

Only a 2 Factor App on your smartphone For example->

Google Authenticator

Android
IOS

Duo Mobile

Authy

IOS
Android

Microsoft Authenticator

Windows (Phone)