zAuth

zAuth is a lightweight, secure, and highly customizable authentication plugin designed for offline-mode and Geyser/Floodgate servers. Built for performance and security, zAuth protects your players from account theft, password guessing, and session hijacking.

Whether you're running a small SMP or a large network, zAuth gives you enterprise-grade login protection with smooth UX.

🔐 Key Features ✅ Secure Login & Registration

+/register <password>

+/login <password>

+/changepassword <old> <new>

+/logout

Passwords are stored using BCrypt (industry-grade hashing).

🛡 Account Protection

Account lock after X failed attempts

Automatic unlock after configured cooldown

IP-trust system (optional)

Session manager prevents re-login abuse

Freeze players completely until authenticated

👀 Player Visibility & Mob Safety Hide ALL players from each other until they login

Disable mob targeting and damage before login

Bossbar reminder

Safe login teleport location

Optional: Allow players to set /spawnlogin

🔏 Privacy Protection

Password masking in:

Chat logs

Console

Command logs

Commands like /login, /register, /changepassword NEVER reveal real passwords.