AuthCore

Login before the world loads

The password prompt runs in the configuration phase, before the player exists. No lobby world, no hiding the player, no freezing them in a box.

Real premium detection

Asks Mojang whether a name is a paid account. The ADOPT policy gives a paid name its real id and skin with no password at all.

Argon2id hashing

Argon2id where the library is available, PBKDF2 as the fallback. A placeholder tells you which one this server actually ended up with.

Alt detection

See which accounts share an address, behind its own permission. Addresses never leave the admin screens and are only ever a truncated hash.

Every screen editable in game

Menus, settings and every player facing message are edited from an in game admin hub. No file editing and no restarts.

Bedrock and skins

Bedrock name markers are understood, skins are stored, and refusal policies decide what happens when a name does not match its account.