How do I secure a cracked server against impersonation (AuthMe)?

On a cracked (offline-mode) server, anyone can join using any username — including your admins' names. A login/register plugin like AuthMe fixes this by making every player authenticate with a password.

How AuthMe protects you

Even if someone logs in using your admin's name, they can't get past your password. AuthMe requires each player to register and then log in on every join, so names alone aren't enough to impersonate anyone.

Step-by-step

1. Switch to Paper/Spigot and set online-mode=false in server.properties.
2. Install AuthMe from the Mods & Plugins page and restart.
3. On first join, players run /register <password>.
4. On later joins, they run /login <password>.

Tip: Combine AuthMe with a whitelist for an extra layer of safety on a cracked server.

Frequently asked questions

Does AuthMe stop admin impersonation? Yes. Even someone using your admin's exact name can't proceed without the registered password.

What server software do I need? AuthMe is a plugin, so run it on the Paper/Spigot family. Install it from the Mods & Plugins page.

Should I also whitelist? It's a good idea — a whitelist plus AuthMe gives you both a gate and password protection.