ServerPassword

ServerPassword

Lock your server with a password!

This client & server-side mod allows you to set a specific password for your Minecraft Forge server. On the serverside, the password is saved as an highly secure one-way-encrypted text and additionally the client connects with a safe asymmetric-encrypted connection to your server, which should meet your needs as it makes password theft as hard as possible.

But what does "safe" mean?

For those of you, who are familiar with the topic of securing software, here is some information:

On the server-side, the password is hashed with the strong PBKDF2WithHmacSHA512 algorithm. To make it as secure as possible, we generate this hash with 10000 iterations. In addition, a SHA1PRNG salt also supports the protection of the password.

The connection between the server and the client is also as secure as possible.

To connect to a password-protected Forge server, the client as well as the server exchange encrypted keys - We use the Elliptic Curve Cryptography (Elliptic Curve Diffie Helman) implemented as a SHA-512 secured key.

In addition, the whole data is encrypted with AES.

Privacy Policy

We do not collect any type of data! Neither your client, nor the mod on the serverside does! Also, there are no logfiles so far, which also supports our approach of collecting no data.

You are running a server?

Your server's config directory should now contain a serverpw.cfg file, which contains your password, safely one-way-encrypted. By default it's empty and you may set it via console with the serverpw set [password] command.

Warning: We don't support cracked (offline-mode) servers! In case you run that kind of a server, you will NOT be able to use this mod!

Using a premade serverpack? Consider this quick-start guide:

1. Download your desired server pack as a zip file and extract/unpack it (e. g. C:/Users...Downloads/serverpack.zip -> C:/Users...Downloads/serverpack).

2. Navigate to the location where the unpacked server pack is located (e. g. C:/Users...Downloads/serverpack).

3. Download the correct version of ServerPassword. Add the mod file (e. g. ServerPassword-1.19.x-1.0.4.jar) directly into the mods folder. Please directly download the mod from the CurseForge website, do not use any other vendors! We only publish this mod on CurseForge.

4. Now you should be able to load your server!

5. Wait for everything to complete loading.

6. In the server command prompt use /serverpw set **** (instead of the stars use a password within parameters).

7. If you have done everything correctly, the command prompt will tell you that a password has been set.

8. You should now be able to log into your password-protected Minecraft server!

Todos

• Proper SpongeForge support resolved by the first release

• Command to configure the password ingame without a restart resolved by the first release

• Getting rid of an insecure protocol resolved by the first release

• Add 1.7.10 Forge support, aswell as Cauldron support resolved by the 1.6.1 beta-release

• Dynamic ports resolved by the 1.6.1 beta-release

Modpacks

You are fully permitted to use and distribute this mod in your modpacks ;)

You miss something, the mod should offer?

Any kind of help is kindly appreciated! So, if you have something for us which we should implement, feel free to contact us in the comments below! ;)