PasswordGate
by waterflane
PasswordGate puts a password check in front of the world on Forge and NeoForge servers, running during the login handshake before a player spawns.
What it does
Authentication takes place in the login handshake, so a connecting player is not given a world, chunks or a player list entry until the password step succeeds. A password screen appears ahead of the normal title screen, and the client and the server both need the mod. A client without PasswordGate fails the protocol check at login instead of being let in and kicked later.
First-join registration is switched on with allowFirstJoinRegistration. A player with no stored record registers during the handshake and must finish the full SRP proof before joining. Passwords are checked with SRP-6a challenge-response on a 3072-bit RFC 5054 group with SHA-256, so the password never travels in plain text and the server keeps only a UUID, a salt, an SRP verifier and timestamps. Offline-mode UUIDs can be impersonated, so the mod logs a warning and online mode is advised. Files are for 1.20.1 and 1.21.1, with the 1.1.0 build on both, and the code is released under the Apache License 2.0.
Key features
SRP-6a authentication
Each login uses a fresh challenge, and the password is verified through an SRP-6a proof rather than sent or stored directly.
Generated passwords
Generated passwords draw from SecureRandom and mix upper and lower case letters, digits and special characters, with at least 128 bits of entropy at default settings.
Protected local credentials
On Windows, a random AES-256 key is protected with DPAPI, and stored data is encrypted with AES-256-GCM under a new nonce on each write.
Brute-force protection
Failed attempts are tracked by UUID and IP address, and an authentication timeout can be set in the config.
Compatibility
Latest build for each game version and loader.
Only full game releases are shown. This mod publishes no snapshot builds.
Use cases
Who it’s for: Server owners who run online-mode servers and want a password check before players load into the world. Players need the mod on their client to get past the password screen.
How it compares
AccProtector is a Forge and NeoForge mod for 1.20.1 – 1.21.1 that also runs on client and server, but it is released under All rights reserved and is not open source. NullPass is a NeoForge-only server-side mod for 1.21.1 under the MIT License, so players join without installing anything. TAuth is open source under the MIT License and runs on Forge 1.20.1, where the server requires it and the client may leave it out.
| Mod | Loaders | Game versions | Environment | Updated |
|---|---|---|---|---|
| PasswordGate | Forge and NeoForge | 1.20.1 – 1.21.1 | Client and server | 2026-08-10 |
| AccProtector | Forge and NeoForge | 1.20.1 – 1.21.1 | Client and server | 2026-10-04 |
| NullPass | NeoForge | 1.21.1 | Server-side only | 2026-08-10 |
| TAuth | Forge | 1.20.1 | Server required, client optional | 2026-07-27 |
Questions
Does PasswordGate need to be installed on the client?
Which loaders and versions does PasswordGate support?
What happens when a player has no password yet?
In the catalog
PasswordGate is one of 8,016 Management mods on ModsFinder, and one of 2,698 Management mods for Forge. 32,366 mods support Minecraft 1.21.1.
More from waterflane
Similar mods
What the author says
PasswordGate adds an extra password-authentication step to Minecraft servers. Authentication runs during the login handshake, before the player enters the world, receives chunks, appears in the player list, or gets normal gameplay data. A client without PasswordGate, or with an incompatible protocol version, is…
Official listing
- Modrinth page
- modrinth.com/mod/passwordgate
- Owner
- waterflane
- Published
- 2026-07-26
- Updated on Modrinth
- 2026-08-10
- Facts verified
- 2026-10-15