rLogin

Premium players join without typing anything. Everyone else logs in with a password.

What is rLogin?

Most authentication plugins make you choose: run online-mode: true and lose every player without an account, or run offline and ask everybody for a password — the owners of real accounts included.

rLogin does neither. It verifies premium accounts against Mojang itself, so they are let straight in with their genuine UUID and skin, while everyone else registers with a password as usual. It works the same on a single server as it does behind a proxy, and 17 languages ship with it.

Where can I use rLogin?

Folia too — it has no badge in this set, but rLogin has supported it from day one. One download, rLogin-<version>.jar, runs on all of them: the same file goes into a Paper/Folia server's plugins/ and into a Velocity proxy's. Velocity 3.x and 4.x both work.

Features

• Real Mojang UUIDs and skins on a standalone online-mode: false server
• Password login for everyone else — frozen in place until they register
• Two-factor authentication (TOTP) through any authenticator app
• "Remember me" sessions, so a quick reconnect doesn't ask again
• Brute-force protection with escalating lockouts by address, never by account
• Premium name protection — cracked players can't claim a real account's name
• Passwords never reach your logs, and that is not a setting anyone can turn off
• 17 languages, every message editable
• Spawn points for joining, first join, logging in and registering
• Bedrock support through Geyser/Floodgate
• AuthMe import, hashes included
• MySQL or SQLite

Requirements

Server	Paper, Folia or Velocity
Minecraft	1.21 or newer
Java	21 or newer
PacketEvents	Required on a standalone online-mode: false server — that is where rLogin does the Mojang verification itself. Not needed behind a proxy, or with auth-mode: online.

Installation

1. Drop rLogin-<version>.jar into plugins/ on every server, proxy included.
2. Set online-mode=false — in server.properties, and in velocity.toml if you run a proxy.
3. Standalone? Install PacketEvents next to it.
4. Start. There is nothing else to configure.

What online-mode has to be

rLogin refuses every connection when these disagree, and says so — a silent half-working server is worse than one that won't start.

general.auth-mode	server.properties	velocity.toml	PacketEvents
auto (default)	online-mode=false	online-mode = false	Standalone only
offline	online-mode=false	online-mode = false	Never
online	online-mode=true	online-mode = true	Never

With online-mode on, the server or proxy turns away every player without a Minecraft account before rLogin is consulted at all. On a server built for those players that is the whole audience gone.

Documentation

Every setting, all commands and permissions, and troubleshooting: pyrelight.mintlify.app

What if I need support?

Join the Discord and we will help you out, or open a GitHub issue.

Want to support us and the plugin?

rLogin is free, and stays free, so that any server can use it. If it saved you some trouble and you would like to say thanks, a donation helps keep the work going.

Sponsors

Thanks to the following sponsor for supporting this project:

Statistics

Building from source

./gradlew build

Requires JDK 21. The distributable lands in rlogin-plugin/build/libs/ as rLogin-<version>.jar; the per-module jars next to it are intermediate build output, not releases.

License

MIT © Raimond Arias. PacketEvents is a separate GPL-3.0 plugin that rLogin talks to at runtime; it is never bundled.