Core2FA — Two-Factor Authentication
🛡 Overview
Core2FA is a Minecraft plugin (Spigot, Paper, PurPur, Folia) for that adds two-factor authentication through Telegram. It protects player accounts from hijacking by requiring login confirmation through a linked Telegram account. With Telegram integration, players can manage their account security quickly and easily from their phone.
✨ Features
-
Account Linking Players can link their Minecraft account to their Telegram account for extra security.
-
Login Confirmation When a player joins, they receive a Telegram notification and can approve or deny the login.
-
Remote Security Controls Through an interactive Telegram menu, players can:
- Approve or deny logins.
- Block their account if suspicious activity is detected (if enabled).
- Unlink their account (if allowed by the server admin).
- Access all settings using the
/menucommand in Telegram to manage their account remotely.
-
Configurable Options Adjustable language, custom server name in notifications, and fine-grained permission controls.
-
Folia Support Optimized to run smoothly on Folia-based servers.
⚙ Setup
- Place the plugin into your
/pluginsfolder. - Start the server to generate configuration files.
- Edit
config.yml:
server-name: "MyServer" # Name displayed in Telegram notifications
language: "en" # Plugin language
telegram:
bot-token: "BOT_TOKEN_HERE" # Your Telegram bot token
bot-username: "NAME_BOT" # Your bot’s username
telegram-menu:
settings:
allow-unlinking: false # Allow unlinking accounts
allow-remote-ban: false # Allow remote banning
- Restart the server.
- Players can use
/2fato link their account.
📜 Commands
| Command | Aliases | Description |
|---|---|---|
/2fa |
/tfa, /auth |
Main command to manage 2FA |
/2fa reload |
— | Reloads the plugin configuration |
/menu (Telegram) |
— | Opens the interactive Telegram menu to manage account remotely |
🔑 Permissions
| Permission | Description |
|---|---|
twofa.reload |
Reloads the plugin configuration (OPs only) |
🖥 Compatibility
- Platform: Spigot, Paper, PurPur, Folia
- Java: 17+
📌 Example Usage
- A player joins the server.
- They receive a Telegram message: "Confirm login to MyServer?"
- They press "Confirm" or "Deny".
- The login is either allowed or blocked.
- Players can use
/menuin Telegram to manage security settings or unlink their account. - Server admins can use
/2fa reloadto apply configuration changes without restarting.
📄 License
MIT License – free to use, share, or modify.

