What AuthMeReloaded works with.
| Platform | Java Edition |
|---|---|
| Loaders | Bukkit, BungeeCord, Folia, Paper, Spigot, Velocity |
| Minecraft versions | 1.16, 1.18.2, 1.20.1, 1.21.1, 26.1, 26.2 |
AuthMeReloaded locks every new connection behind a register or login command until a player proves who they are, protecting offline-mode servers from username theft and adding a second layer of protection on online-mode ones. It runs on Bukkit, Spigot, Paper, and Folia, with native Velocity and BungeeCord builds for networks that want one login shared across every connected server.
Installation
The general steps follow the same pattern as installing any plugin on a Paper or Spigot server, with a few AuthMeReloaded-specific settings to check afterward.
- 1.Pick the jar built for your platform: Bukkit, Spigot, Paper, Folia, or the Velocity and BungeeCord proxy builds.
- 2.Drop the jar into the server's plugins folder and restart once to generate config.yml.
- 3.Set registration mode, session length, and password hashing in config.yml before players connect.
- 4.Restart again to apply the configuration.
Supported server software and proxies
- Paper, Spigot, Folia, Velocity, and BungeeCord: build 6.0.1, reaching Minecraft 26.2, published September 3, 2026.
- Bukkit: build 6.0.0-R1, capped at Minecraft 26.1.2 on a beta channel, published April 25, 2026.
The Bukkit build trails the rest of the lineup by one game-version cycle and has stayed on a beta channel since April, so a Paper or Spigot install gets newer version coverage than a plain Bukkit one.
Authentication features
Unauthenticated players cannot move, place blocks, open inventories, or type most commands until they run /register or /login. Session Login remembers a trusted client so returning players skip that step, and two-factor authentication adds a one-time code on top of the password for accounts that turn it on.
- E-mail recovery for players who lose access to a registered account.
- Country whitelist and blacklist filtering by IP.
- A built-in anti-bot system for mass fake-join attempts.
- Optional graphical login and register dialogs on Paper and Folia 1.21.11 and newer, instead of chat prompts.
- Premium bypass, letting a verified Mojang account skip password entry entirely.
Permissions, commands, and dependencies
AuthMeReloaded ships its own permission nodes, authme.player.* for the commands every player needs and authme.admin.* for server operators, and works with server-native permissions or a dedicated manager such as LuckPerms without extra setup. No plugin is required to run it. PacketEvents becomes necessary only for two optional features: premium bypass on a direct, offline-mode connection, and protecting a player's inventory before they finish logging in.
Bedrock and cross-play
AuthMeReloaded has no Bedrock-native build; it is a Java Edition server plugin. Bedrock players who connect through Geyser go through the same register or login command as everyone else. Adding Floodgate on top links Bedrock accounts to a Java identity and can skip that prompt for them entirely, which is worth knowing before assuming every player sees the same login flow.
How to secure a Minecraft server with AuthMeReloaded
Questions about AuthMeReloaded.
5 questions
How do I install AuthMeReloaded?
Download the jar for your platform, Bukkit, Spigot, Paper, Folia, or the Velocity and BungeeCord proxy builds, from the project's Modrinth page. Drop it into the server's plugins folder, restart once to generate config.yml, then adjust registration and session settings before players connect.
Does AuthMeReloaded work on Velocity or BungeeCord?
Yes. AuthMeReloaded ships dedicated Velocity and BungeeCord builds alongside its backend plugin, so a network can require login once on the proxy and carry that session across every connected server. Both proxy builds currently reach the 26.2 game version, the same ceiling as the Paper, Spigot, and Folia builds.
Which Minecraft version does AuthMeReloaded support?
Paper, Spigot, Folia, Velocity, and BungeeCord builds all reach 26.2. The Bukkit build is one step behind at 26.1.2, on a beta channel last published in April 2026. Older builds cover releases back to 1.16, so a legacy server is not locked out of using it.
Can Bedrock players log in on a server running AuthMeReloaded?
AuthMeReloaded has no Bedrock-native build; it only runs on Java Edition server software. Bedrock players who connect through Geyser go through the same register or login command as Java players, unless the server also runs Floodgate, which can skip that prompt for linked Bedrock accounts.
Does AuthMeReloaded need other plugins installed?
No plugin is required to run AuthMeReloaded. PacketEvents only becomes necessary if premium bypass is enabled on a direct, offline-mode connection, or to protect a player's inventory before login. Without it, those two specific features stay disabled at startup rather than running unsafely.
