WorldLockPlus 1.0

WorldLockPlus

 

Secure world access with enterprise grade password protection

 

WorldLockPlus is a Bukkit, Paper and Spigot plugin that adds password protection to worlds managed by Multiverse Core. Even server operators must enter passwords to access protected worlds unless they have the bypass permission.

 

Features

 

• Enterprise security using bcrypt password hashing with work factor 12

• Operator protection, ops must enter passwords unless bypass permission is granted

• Blocks teleportation, world changes, and unauthorized access

• Session based access, authorization lasts until logout

• Persistent storage with secure password hashes

• Full Multiverse Core integration

• Automatic detection of legacy password formats

 

Requirements

 

Minecraft Server

Spigot or Paper 1.19 or newer

 

Dependencies

Multiverse Core (required)

 

Java

Java 17 or newer

 

Installation

 

Commands

 

Admin Commands

 

/worldlock

/wlock

 

/worldlock set

Sets a password for a world

 

/worldlock remove

Removes password protection from a world

 

/worldlock list

Lists all protected worlds

 

Permission

worldlock.admin (default OP)

 

Player Commands

 

/wunlock

Unlocks access to a protected world

 

Permission

worldlock.use (default true)

 

Permissions

 

worldlock.admin

Full access to world lock management

Default OP

 

worldlock.use

Allows players to unlock worlds

Default true

 

worldlock.bypass

Bypass all world password protection

Default false

 

Usage Example

 

Admin protects the lobby world

/worldlock set lobby MySecurePassword123

 

Player attempts to teleport and is blocked

/mv tp lobby

Message: This world is password protected. Use /wunlock lobby

 

Player unlocks the world

/wunlock lobby MySecurePassword123

Message: Password correct. Teleporting to lobby

Message: Access granted until logout

 

Player can now enter freely

/mv tp lobby

 

Security Details

 

• bcrypt hashing with work factor 12

• Built in unique salt per password

• Resistant to brute force attacks

• Passwords never stored in plain text

• Access automatically revoked on logout

 

Configuration

 

Passwords are stored automatically in

plugins/WorldLockPlus/config.yml

 

Manual editing is not required or recommended.

 

Troubleshooting

 

Plugin will not enable

Make sure Multiverse Core is installed and enabled first

 

Cannot access a world

Use /wunlock

 

Operators bypassing protection

Check for worldlock.bypass permission

 

Legacy password warnings

Reset the password using /worldlock set

 

Notes

 

• Authorization lasts until logout

• Players are removed from protected worlds if access is lost

• Works with all Multiverse Core features

• Passwords are case sensitive