About

A maximum-security login/register system for *** servers. New players must /register with a confirmed password; returning players must /login within a 100-second countdown shown via a red boss bar and action bar. During the countdown players are forced into Spectator mode and all movement, interaction, damage, inventory, chat, and commands are blocked to prevent bypass exploits. Passwords are hashed with PBKDF2-SHA256 and never stored in plain text. Includes /user changepass for self-service password changes and an admin /user reset command. Plays a success sound on successful authentication.