XLogin

What it does

Offline-mode servers have to ask who you are. XLogin does the asking — register, login, change password — and then gets out of the way for anyone with a real Minecraft account: a Netty pipeline injection puts those players into online mode individually, so they join without typing anything. TOTP two-factor, email recovery, per-IP rate limits and temporary bans after repeated failures. One login covers the whole network, Bedrock players are handled through Floodgate, and existing AuthMe or JPremium databases can be migrated in.

Worth knowing

Premium players skip the login

A Netty pipeline injection puts accounts that own the game into online mode individually — they connect and they're in.

Two-factor

TOTP, so Google Authenticator or Authy, for the accounts that need it.

One login for the network

Authenticate on one server and you're authenticated on all of them.

Locked down until authenticated

Movement, chat and interaction are held, with the prompt on a title, action bar or boss bar.

Brute force costs something

Per-IP rate limits and temporary IP bans after repeated failures.

Migrates from AuthMe and JPremium

Existing password hashes come across; nobody has to re-register.