InvalidPlayerBypassList
by MisterFish
Players listed in InvalidPlayerBypassList can join an online-mode Minecraft server without passing Mojang authentication, and the list is set through a configuration file or server commands.
What it does
The mod intercepts login attempts on a server whose online-mode setting is true and lets a named player through the authentication check. Each entry is a player name, and an optional IP address can be attached so that the name only counts when the connection comes from that address. When IP enforcement is enabled in the configuration, a player has to match both the name and the IP; an entry without an IP is matched on name alone.
The list is managed with server commands that add a player, remove a player, show the current entries with their associated IPs, or enable the bypass at runtime. Settings are stored in invalidplayerbypasslist.properties. The mod is most useful for private testing on a LAN and for fallback cases where a few known usernames should be allowed in while authentication stays on for everyone else.
The mod is server-side only, so players join without installing anything. It is a Fabric mod released under CC0 1.0 Universal, which is open source, and its files cover 1.21 – 26.1.2 with 15 release versions. The latest file targets 26.1.2 and was published on 2026-05-17. Fabric API is not listed as a dependency.
Key features
Named player bypass
Specific usernames are allowed to join even when online mode is on and Mojang authentication would otherwise block them.
Optional IP binding
An entry can carry an IP address, and with IP enforcement enabled a connection is accepted only when its address matches that entry.
Server command control
Commands add and remove entries, list the current bypass list with associated IPs, and switch the bypass on at runtime.
Gallery
Compatibility
Latest build for each game version and loader.
26.x3 of 3 versions with builds
1.21.x12 of 12 versions with builds
Only full game releases are shown. This mod publishes no snapshot builds.
How it compares
AuthBack is also open source under the GNU Affero General Public License v3.0 only, published for Fabric 1.21.10 – 26.3, and runs as a client or server optional mod, so either side can run it without requiring it. AntiScan is server-side only and open source under the MIT License, with Fabric files for 1.20 – 26.2. Unlike InvalidPlayerBypassList, both target a different purpose, so the choice depends on whether the goal is bypassing authentication or filtering connections.
| Mod | Loaders | Game versions | Environment | Updated |
|---|---|---|---|---|
| InvalidPlayerBypassList | Fabric | 1.21 – 26.1.2 | Server-side only | 2026-05-17 |
| AuthBack | Fabric | 1.21.10 – 26.3 | Client or server, optional | 2026-09-17 |
| AntiScan | Fabric | 1.20 – 26.2 | Server-side only | 2026-07-05 |
Questions
Does InvalidPlayerBypassList need to be installed on the client?
Which Minecraft versions does InvalidPlayerBypassList support?
How is a player removed from the bypass list?
In the catalog
InvalidPlayerBypassList is one of 8,016 Management mods on ModsFinder, and one of 5,930 Management mods for Fabric. 15,189 mods support Minecraft 26.1.2.
More from MisterFish
Similar mods
What the author says
InvalidPlayerBypassList allows specific players to join a Minecraft server even when the server is in online mode, regardless of Mojang authentication. This is particularly useful for private testing, LAN setups, or fallback scenarios where certain usernames (and optionally IPs) should be allowed to bypass…
Official listing
- Modrinth page
- modrinth.com/mod/invalidplayerbypasslist
- Owner
- MisterFish
- Published
- 2025-06-24
- Updated on Modrinth
- 2026-05-17
- Facts verified
- 2026-10-15