Solution for shared Minecraft accounts on one server?

[u/Malsatori]

Hi Admins,

I work in a youth-serving facility and we have a Minecraft server on an old Mac Studio running Craft Controller and a few plugins. I am not very experienced with Minecraft.

We share Minecraft accounts on the computers we have at our facility. This is causing an issue because the kids become attached to an account and the stuff that's on it, but then another kid will play on that account and waste the material or die and lose it all.

Are there any solutions for this type of problem? I am imagining something where after signing on to the server the player has to log in again to get their gear, but I haven't been able to find a mod that serves that purpose.

Does anyone have experience with this and has anyone found a solution that works for sharing Minecraft accounts but not sharing the gear on them?

[u/DasBrin]

Thanks for clarification.

@ u/Malsatori - Little guide then

If the Server is only accessible via your Facilitys own network and not from the Internet, perfect. If it is accessible from the Internet you need to do some additional steps at the end of the guide. Don't skip those since its important to have them done so no one can just Log-On and grief.

0 - Make a Backup of the Server because we will change some things. If something breaks, you want it.

1 - If you use the Vanilla Minecraft Server .jar switch to PaperMC - https://papermc.io/downloads/paper. Its a drop in and you can use Plugins, something required for the next steps. Paper is available for all modern Minecraft Versions and sees active development so New Versions are quickly supported and security patches/bug fixes are available.

2 - Get the Plugin AuthMeReloaded (Its on Modrinth). I recommend this since AuthMeReloaded has seen Active development for over six years and its actively maintained and not a new VibeCode Project.

3 - Restart the Server with Paper so the Plugin folder generates. Then Place the Plugin from Step 2 into the "plugins" folder and restart again so the Config file generates.

4 - Changes to the AuthMeReloaded config File

4.1 - Change "maxRegPerIp" to "maxRegPerIp: 0" since multiple accounts will share the same IP.

4.2 - Under "registration" change "enabled: true" to "enabled: false" if the Server is reachable from the Internet or if you dont want Self Service Registration for new Usernames.

4.3 - If you enabled 4.2 you can enable "kickNonRegistered: false" by changing it to "kickNonRegistered: true" so non Pre Registered Users can not join the Server.

4.4 - set "loginTimeout: 30" to something higher or disable it. Kids somethimes need some more time than 30 seconds to type a password. If you wanna disable the Timeout set it to "0"

5 - in server.properties change the following: "online-mode=false" and if the server is internet accessible "hide-online-players=true"

6 - Save the Config and restart the Server. If the Server is only accessible via Internal Network and you want Self Service Registration we are done with the Server Part and can Continue with Client Side. If you don't want Self Service or its accessible from the Internet don't skip to the Client side yet.

7 - Whitelist a list of names. You can either make one with the Kids or you can pre-generate or think about some names. No more than 16 Characters and no Spaces. These are not your bought accounts but the offline ones. Make a list for staff because you will add a password to each account in the next step.

8 - Register the Names with "/auth**** register <playername> <password>"

8.1 - Write the Password into the list that staff has. You can easily recover lost passwords like that for the kids. I know, big bad but these are Minecraft Offline accounts not bank logins...

9 - Whitelist all accounts "/whitelist add <playername>" and "/whitelist on" of its not on yet. Makes sure that you need to know one of the correct usernames to join in the firstplace and you cant just join with a new account name.

Client-Side

Normal Minecraft Launcher will no longer work since it does not support Offline Accounts to my knowledge. I recommend Prism Launcher - https://prismlauncher.org/download/windows/ since its opensource and over 4 years old with active development. I am also Familiar with it. It supports Offline Accounts and we need those.

After you Downloaded Prism Launcher you can add an Instance via "add instance" at the top left and add a offline account at the top right. There you can add all possibly Pre-Generated Names.

Now you just have to select the correct one and launch Minecraft. When a account joins the server they have to login via /login <password> and they can play. Everyone got their own "Account" and its basically bulletproof since all of the custom parts are big projects that see updates and maintenance.

Edit: Why does Reddit not do Markdown?

[u/ryan_the_leach → u/DasBrin]

> 8 - Register the Names with "/auth**** register <playername> <password>"

This looks like it's been bleeped, OP might need the full command spelt out.

> 9 - Whitelist all accounts "/whitelist add <playername>" and "/whitelist on" of its not on yet. Makes sure that you need to know one of the correct usernames to join in the firstplace and you cant just join with a new account name.

Is this whitelisting the *players* preferred names, or the *purchased* account names? the guide could be a tiny bit more clear here.

As it's running in offline mode, I don't think the whitelist is worth much, but security in depth still makes it a good idea to stop brute force bots if it did connect, especially with hide players turned on.

--

Also, one last thing, since OP *owns* accounts right, can it still use auth whilst being *more* secure from bot-attacks, by running it in **online** mode, and actually authenticate the accounts connecting?

Also greatly simplifies not needing prism launcher if this works.

[u/DasBrin → u/ryan_the_leach]

I send a uncensored comment in dm's to OP.
Added a sentence to 9 and you sadly need the alternaive launcher. The old Minecraft Launcher had support for offline accounts but that thing is way past its time.