AuthShield Pro is a 2FA plugin built to secure your server in the case of a compromised staff account. It supports Spigot/Paper, BungeeCord, and Velocity.
AuthShield allows you to authenticate using an authenticator app (such as Google Authenticator or Microsoft Authenticator) or using a one time code sent to their email.
Features
Authenticator: Shows a QR code to the player so they can scan it and add to their authenticator app.
Email Verification: Sends an email with a 6 digit code to the email to verify
Flexible Authentication: If a player has both methods setup, they can choose either one of them.
Backup Codes: Generates back up codes in case the player loses access to their phone or email.
Databases: Supports SQLite, MySQL, MariaDB, and PostgreSQL.
Security: Authenticated sessions are linked to the player's IP. If someone logs in from a different location, they will be prompted to enter the authenticator code or code from their email. The database queries are fully secured against SQL injections. If someone fails the login 3 times in a row, the attempts are logged (with a discord webhook setup). All secrets & backup codes are secured in the database using AES-256 encryption. The encryption keys are locked to your server's machine ID, meaning that even if someone gets ahold of your files, they cannot decrypt the keys.
License: A valid license key is required. The plugin verifies the license on startup and every 3 hours. Each license is limited to one IP address. If you need a second IP whitelisted or your server's IP changes, please open a support ticket in the Discord server.
AuthShield allows you to authenticate using an authenticator app (such as Google Authenticator or Microsoft Authenticator) or using a one time code sent to their email.
Features
Authenticator: Shows a QR code to the player so they can scan it and add to their authenticator app.
Email Verification: Sends an email with a 6 digit code to the email to verify
Flexible Authentication: If a player has both methods setup, they can choose either one of them.
Backup Codes: Generates back up codes in case the player loses access to their phone or email.
Databases: Supports SQLite, MySQL, MariaDB, and PostgreSQL.
Security: Authenticated sessions are linked to the player's IP. If someone logs in from a different location, they will be prompted to enter the authenticator code or code from their email. The database queries are fully secured against SQL injections. If someone fails the login 3 times in a row, the attempts are logged (with a discord webhook setup). All secrets & backup codes are secured in the database using AES-256 encryption. The encryption keys are locked to your server's machine ID, meaning that even if someone gets ahold of your files, they cannot decrypt the keys.
License: A valid license key is required. The plugin verifies the license on startup and every 3 hours. Each license is limited to one IP address. If you need a second IP whitelisted or your server's IP changes, please open a support ticket in the Discord server.
