ProtectCodes 🔐

ProtectCodes is a lightweight yet powerful Paper/Spigot plugin for Minecraft 1.21+ that adds an extra layer of security for server staff and selected players. It generates one‑time codes, sends them to Discord via webhook, and requires players to enter the code before they can move or use commands.

Perfect for administrators who want to protect their accounts from hijacking or unauthorized access.

✨ Features

🔑 One‑time codes generated on player join

📩 Discord webhook integration — codes are sent directly to your Discord channel

⏳ Session system — configurable session time, no code required if IP and session are still valid

🚫 Movement & command lock until the correct code is entered

⚙️ Configurable punishments after a set number of failed attempts (kick, ban, custom commands)

🎨 Customizable prefix for all plugin messages

✅ Permission system for fine‑grained control

⚙️ Configuration

prefix: "&7[&aProtectCodes&7] "
discord-webhook: "https://discord.com/api/webhooks/XXX/YYY"

players:
  Rodion: 6
  AnotherPlayer: 8

session-time: 30
block-movement: true
block-commands: true

allowed-commands:
  - code

max-attempts: 3

punish-commands:
  - "kick %player% Invalid authorization"

🔒 Permissions