Safeserver
A simple Fabric mod for Minecraft that adds mandatory password authentication to your server, enhancing security.
Made for online-mode off / cracked servers.
Features
- Password Protection: Players must set a password on their first join and log in on subsequent joins.
- Interaction Blocking: Prevents unauthenticated players from breaking/placing blocks, using items/entities, or interacting with the world.
- Command Restriction: Blocks all commands except
/loginand/setpassworduntil the player is authenticated. - Secure Storage: Passwords are securely hashed (SHA-256) and stored in a JSON file (
config/safeserver/passwords.json). - OP Safety:
- Temporarily removes OP status from players upon joining until they authenticate.
- Removes OP status from players upon disconnecting as a safety measure.
- Restores OP status after successful authentication if the player was originally OP.
- Position Freeze & Safety: Players are placed in Spectator mode and teleported to a safe, fixed location (0, calculated surface Y, 0) upon joining if authentication is needed. They are kept at this location until authenticated, preventing coordinate leakage. Their original position is restored upon successful login.
Commands
/setpassword <password> <password>- Sets your initial password upon first joining the server.
- Requires typing the password twice for confirmation.
- Only usable when required (first join).
/login <password>- Logs you into the server with your existing password.
- Only usable when required (subsequent joins).
/changepassword <oldPassword> <newPassword> <newPassword>- Allows an authenticated player to change their own password.
- Requires the old password and confirmation of the new password.
/resetpassword <playerName>- OP Only (Level 2+): Resets the password for the specified player.
- Forces the target player to set a new password using
/setpasswordon their next join (or immediately if they are currently online).
Installation
- Ensure you have the Fabric Loader installed.
- Download the
Safeservermod JAR file. - Place the JAR file into your server's
modsfolder. - Restart your server.
The mod will automatically generate the necessary configuration file upon first load.
How to Install safeserver (Mod)
safeserver by YourAverageDev is verified for Fabric across Minecraft versions 1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1 (latest release: 2.2.0, file size: 37 KB). Follow the steps below to install it safely from ModCraft.tv:
- Click the Download button above and select your Minecraft version (1.20.1, 1.20.2, 1.20.3, 1.20.4, 1.20.5, 1.20.6, 1.21, 1.21.1) and platform (Fabric).
- Make sure you have the compatible loader or environment installed for Fabric.
- Move the downloaded safeserver file into your Minecraft
.minecraft/modsfolder and launch the game.
All Versions
+ Add VersionEverything else is unchanged. Every release from 1.20.1 through 26.2 is still
built and shipped here, and the authentication flow itself is untouched. 26.3
needed no code changes at all — the server APIs the mod hooks into are the same
as they were in 26.2.
Downloads are per-version, so pick the jar matching your server exactly, for
example safeserver-2.2.0+mc26.3.jar for a 26.3 server.
Players who disconnected mid-login were incorrectly re-set to spectator on rejoin. Fixed by defaulting to survival if no prior gamemode was saved.
- Enhance player security by teleporting authenticating players to a safe, calculated location at (0,Y,0) instead of keeping them at their join position
- Calculate Y coordinate based on the actual surface height at (0,0) to ensure players are safely above ground
- Detect and remedy situations where a player disconnects during authentication and rejoins, preventing them from being stuck in spectator mode
- Update README to clearly document this security feature
Resolves #5: Coordinates Weakness vulnerability
This project **was** abandoned for a while due to the lack of my own time. Now, the codebase has been **COMPLETELY REVAMPED** and **OPTIMIZED**.