Premium and Bedrock login

Let players with a paid Minecraft account and Bedrock players skip the password in JPAuth.

Premium players on an offline-mode server

1. Install PacketEvents next to JPAuth, and restart.
2. Check that these are on in JPAuth's config.yml. They are on by default:

premium:
  enabled: true
  auto-login: true
  auto-register: true

Premium players then log in through Mojang with no password. This works with any launcher signed in with a Microsoft account, including the Modrinth launcher.

What each option does

Players who already have an account turn premium login on or off for themselves with /premium.

Cracked players with a premium name

When someone joins with a name that a paid account uses and nobody has registered it yet, Mojang checks that they own it. A cracked player who just happens to use that name sees "Invalid session" once. If they join again from the same address within 5 minutes, they get in normally and register with a password.

When Mojang can't be reached

If there's a short network problem or a Mojang outage, the player is told that JPAuth could not reach Mojang, and to join again in a moment. Nothing is wrong with their account.

Behind a proxy

If your server is behind a proxy, use Velocity modern forwarding or BungeeGuard, and keep the server's port open only to the proxy. Otherwise, someone could connect to the server directly and pretend to be another player.

Bedrock players

Install Geyser and Floodgate. Floodgate has already checked the player's Xbox account, so they're registered and logged in automatically, with no password. The options are under bedrock in config.yml, and both are on by default.

Moving from AuthMe

Run /auth import authme. Players keep their passwords.

Protect your operators

JPAuth warns you at startup about operators who don't have an account yet. Until they register, anyone could register that name and get operator, so have them register first.

See the JPAuth page for all commands and the full config.