SecureMyAccount

Visit the plugin page here.

Inspired by GitHub and Google, here is a Bukkit plugin to use two factor authentication. Your Mojang/Minecraft account is protected by a single password or login token. What happens if your account gets stolen? Therefore this plugin exists.

The password is time based and generated by your smartphone completely independent from your Mojang account and your computer. This process is also known as 2FA.

Features

• Many other plugins like this sends a clickable link to Google for the QR code. This plugin doesn't do that. The code is generated rendered only on the server for increased privacy and security
• Protect selected commands
• Provides a better security to your server
• Displays the QR code on a minecraft map
• User friendly. Just scan the QR code with your smartphone!
• A session will be valid for certain time period so you don't have to enter your password again.
• No other plugins required

Commands

Command	Description
/register	Requests a new secret key
/login < code >	Starts a new session to prove your identity

Permissions

Permission Node	Description
securemyaccount.command.enable	Permission to invoke the request command
securemyaccount.command.start	Permission to start a new session
securemyaccount.command.protect	Protected player accounts

Images

Requirements

2 Factor App on your phone, desktop or offline (specialized hardware tokens).

Apps (Open-Source only)

IOS

• Authenticator AppStore
• FreeOTP AppStore

Android

• andOTP F-Droid PlayStore
• Yubico Authenticator F-Droid PlayStore
  • Requires YubiKey hardware token
• OnlyKey U2F PlayStore
  • Requires OnlyKey hardware token

Desktop (Linux, Mac, Windows):

• YubiKey Authenticator Download
  • Requires YubiKey hardware token
• NitroKey App Download
  • Requires Nitrokey hardware token
• OnlyKey App
  • Requires OnlyKey hardware token