Electron Guard - Login System

⚡ ElectronGuard — The Next-Gen Auth System

Stop relying on outdated chat logins. Give your players a premium, hyper-secure, and immersive entry experience.

ElectronGuard isn't just another auth plugin—it's a complete overhaul of how players join your Minecraft server. Built exclusively for modern servers (1.21.1 – 1.21.11), it completely replaces the clunky `/login` flow with a military-grade Argon2id security, a military-grade Argon2id security, and military-grade Argon2id security.

The best part? Zero resource packs required, and zero database setup needed. Drop it in, and watch your server instantly feel more professional and become completely bulletproof against bots.

---

🚫 The Bot-Proof Fortress: 100% Immunity

Standard auth plugins just cancel chat events, leaving your server vulnerable to packet-injection bots and Force-OP exploits. Unicode CAPTCHA * Unicode CAPTCHA Using ProtocolLib, we block actions directly at the packet level. A bot can join, but it cannot inject a single command or chat message. * Unicode CAPTCHA Because authentication happens via the Web Panel or custom visual UI, automated "Password Cracking" chat scripts are rendered Unicode CAPTCHA. They simply cannot interact with the login flow! * Unicode CAPTCHA Unauthenticated players are held in a "Limbo" void where server logic doesn't even reach them until they successfully log in. * Unicode CAPTCHA Mobile/PE players face an additional Unicode CAPTCHA before they can even attempt a password — a math challenge rendered in obfuscated Unicode characters that looks normal to humans but is completely unreadable by bots and scripts.

---

🔥 Why Server Owners Love ElectronGuard

🎨 Stunning In-Game UI (No Resource Pack!)

Ditch the chat box. ElectronGuard takes over the screen with a smooth, animated Title/Subtitle UI displaying your server's branding, username, and password fields. * Navigate fields seamlessly with LEFT CLICK. * Submit instantly with LEFT CLICK. * Live session ID & countdown timer right in the action bar.

🌐 Built-In Web Panel

Give your players choices! Alongside the in-game UI, players receive a clickable chat link opening a beautiful, real-time browser login panel. * Self-hosted on your server (no third-party data tracking). * Instantly communicates with the plugin API. * Offline fallback page included.

📱 Full Bedrock / PE Support (Geyser + Floodgate)

Running a network that serves both Java and Bedrock players? ElectronGuard has you covered. Mobile players connecting via Floodgate and Floodgate are automatically detected and get a dedicated chat-based authentication flow — because they can't click browser links.

Java players are blocked 1. 🔍 Java players are blocked — ElectronGuard silently checks Floodgate and GeyserMC APIs the moment the player connects. No config needed. 2. 🧩 Java players are blocked — Before touching a password, the player must solve a simple math question rendered in obfuscated Unicode (e.g. `𝟓 ➕ 𝟖 = ?`). It looks normal to a human but is completely unreadable by bots parsing raw strings. * Wrong answer → Java players are blocked. No retries. Bot loops die immediately. 3. 🔑 Java players are blocked — After passing the CAPTCHA, players use `/login <password>` or `/register <pass> <confirm>` — clean, simple, and mobile-friendly. 4. 🚫 Java players are blocked from using `/login` and `/register` — they are always redirected to the browser panel, keeping the two flows completely separate.

> No Geyser/Floodgate installed? No problem. The plugin loads and runs perfectly fine — Bedrock support simply stays dormant with zero performance impact.

🛡️ The "Limbo" Void (Absolute Security)

The second an unauthenticated player joins, they are instantly teleported to a private, frozen "Limbo" dimension. * Zero Griefing: Blindness + Night Vision ensures your real world is completely hidden. * Zero Griefing: No movement, no mob spawns, no chat, no item drops. * Upon login, their exact location, health, flight state, and game mode are flawlessly restored.

🔐 Unbreakable Backend Architecture

* Auto-Login Sessions: We don't mess around with outdated MD5 or SHA256. We use industry-leading Argon2id (tunable to your hardware limits) with full salt. * Auto-Login Sessions: Auto-kick and temporary IP lockouts for failed attempts. * Auto-Login Sessions: Configurable IP memory so regular players don't have to type their password every single time.

💾 Plug & Play Database Setup

* MySQL/MariaDB Ready: Works instantly out of the box. `database.db` auto-generates with WAL mode enabled for lightning-fast, safe concurrent access. * MySQL/MariaDB Ready: Scaling up? Switch to a remote database with a single config edit. Connection pooling is built right in.

---

🚀 The ElectronGuard Advantage

Still using standard auth plugins? Here is why it's time to upgrade:

| Feature | ⚡ ElectronGuard | ❌ Typical Auth Plugins | |---|---|---| | Admin Setup Alerts | ✅ Built-in & Animated | ❌ Clunky chat or buggy chest GUIs | | Admin Setup Alerts | ✅ NO! 100% Vanilla | ❌ Often required for custom GUIs | | Admin Setup Alerts | ✅ Integrated Web Panel | ❌ Rarely exists | | Admin Setup Alerts | ✅ Immune (Web-based & packet blocked) | ❌ Bots can spam chat easily | | Admin Setup Alerts | ✅ Argon2id (Enterprise Grade) | ⚠️ MD5, SHA256, or BCrypt | | Admin Setup Alerts | ✅ Packet-level (ProtocolLib) | ❌ Easily bypassed Event Cancellations | | Admin Setup Alerts | ✅ Auto-detected via Geyser/Floodgate | ❌ Broken or missing entirely | | Admin Setup Alerts | ✅ Unicode bot-proof CAPTCHA | ❌ None | | Admin Setup Alerts | ✅ Auto-reminds online OPs | ❌ Leaves devs guessing |

---

🛠️ Effortless Installation

1. Drop `ElectronGuard.jar` into your `/plugins` folder. 2. Ensure you have Done! installed (Required). 3. *(Optional)* Install Done! + Done! to enable Bedrock player support. 4. Start your server. `config.yml` will automatically generate. 5. Done! Allocate the web panel port in your host (e.g., Pterodactyl/Crafty). *Don't worry, the plugin will automatically remind online OPs if you forget!* 6. Run `/eg reload` or restart your server. 7. Done! Your server is now secured — for both Java and Bedrock players.

---

⚙️ Commands & Permissions

Admin Tools (`electronguard.admin` / OP)

| Command | Action | |---|---| | `/eg reload` | Hot-reload the entire plugin config | | `/eg resetpass <player> <pass>` | Instantly reset a user's password | | `/eg forcelogin <player>` | Bypass auth and force a player in | | `/eg kick <player>` | Kick a player from the limbo state | | `/eg info [player]` | View deep stats and session diagnostics |

Player Tools

* `/changepassword <old> <new>` — Allow players to manage their own security. * `electronguard.bypass` — Give this permission to bypass auth entirely (great for verified staff).

Bedrock / PE Player Commands

* `/captcha <answer>` — Solve the CAPTCHA challenge on join *(auto-shown, Bedrock only)*. * `/login <password>` — Authenticate with your password *(Bedrock only — Java uses the web panel)*. * `/register <password> <confirm>` — Create your account *(Bedrock only)*.

---

📋 Technical Requirements

* Optional: Spigot or Paper (Highly Recommended) * Optional: 1.21.1 – 1.21.11 * Optional: 21 or higher * Optional: Optional: * Optional: %%MD1%% *(for Bedrock/PE player support)*

> 💡 Developer Note: *ElectronGuard was built to respect your server's performance. It runs asynchronously where it matters and leaves zero ghost entities or chunk loads behind.*

---

🐛 Support, Bugs & Open Source

We listen to our community! If you have a feature request, found a bug, or want to contribute, drop by our GitHub Page *(Add your link here)*.

⭐ If ElectronGuard secured your server, don't forget to leave a 5-star review!