MultiAuth - Discord, Google & Passkeys v2.2

Sign in with a Google account, for users who don't have Discord. This is a pure identity login: server restrictions, roles, automation and bot logs stay Discord-exclusive, Google has none of them. The security core is shared, though verification, trusted devices and sessions work the same for Google as for Discord.​

Passwordless sign-in with Face ID / Touch ID / Windows Hello or a physical security key. Two roles at once: a standalone login and a second factor on top of a provider login.

Match login buttons to your theme. Don't like the default icon or color? Set your own. Choose an inline or list layout, and for extra customization, select a button style: Theme / Outline / Brand.​

Configure what to require password, panel 2FA, both, or let the user choose and when: always, never, or only for untrusted sessions.

A trusted device skips the verification step that untrusted sessions get; a login from a new device can be approved or denied straight from a trusted session. Login location city, region, country, provider, network type, ASN is resolved via offline GeoIP, with no external lookups during login

Allow only members of selected servers in, optionally with specific roles.

disable_native_login removes the password form and rejects native login server-side, not just hides it in the UI.

Login observations flag likely alts and duplicates for admins. An optional device/cookie registration block stops one device from spawning multiple accounts. Data is kept for a configurable window (90 days by default) and cleaned up automatically.​

Do users have to have Discord?
No. Sign-in can run through Google or passkeys Discord is just one of the options.

Does this replace the default Pterodactyl login?
No, the normal login stays until you enable native-password lockdown yourself.

Can users register through a provider?
Yes, if you enable registration in the admin panel (off by default).
It requires a verified provider email; there's no silent linking by matching email to an existing account.

Can I allow only members of my Discord server?
Yes by selected servers and roles. This works for Discord only; Google and passkeys
have no such gating.

What if the Discord bot is misconfigured?
With restrictions enabled it's fail-closed: login is blocked until you fix the config.

Does the addon store provider tokens?
Yes, when they're needed for linking and actions encrypted at rest.

Can users unlink a provider?
Yes, from the account page at any time.​