ServerPassword — Secure Password Protection for Minecraft Servers
Running a private Minecraft server often means dealing with unwanted visitors. Whitelists and permission plugins work, but they lack the straightforward, flexible protection that a dedicated password layer provides. ServerPassword — Secure Password Protection for Minecraft Servers solves this by adding a direct password gate to your world, with minimal setup and no complex permission trees.
What This Add-On Does
This is a client-server modification built for the Forge loader. Once installed on both sides, the server requires a secret phrase before any connection is accepted. The client handles the authentication flow automatically, prompting the player for the password when joining. No extra files, no manual config editing for players, and no need to manage user lists.
The server-side password is stored in the serverpw.cfg file, but not in plain text. It uses a strong hash generated with PBKDF2WithHmacSHA512 and 10,000 iterations, plus a SHA1PRNG-based salt. Even the server administrator cannot recover the original phrase from the stored data.
Security That Holds Up
Basic password mods often send credentials in a way that can be intercepted. This add-on takes a different approach. The handshake between client and server uses Elliptic Curve Diffie-Hellman key exchange combined with AES encryption. The password itself is never transmitted in an open format; only temporary session keys are shared during the connection process. Even with traffic sniffing, the secret phrase remains protected.
There is also no telemetry or data collection. Neither the client nor the server component logs connection details or sends information to third-party services. Authentication happens entirely locally. One limitation to note: the mod does not function on offline-mode servers (online-mode=false). If your server runs in that configuration, connections will be refused to maintain security integrity.
How to Install on the Server
Adding this mod to an existing Forge server pack takes only a few minutes. Follow these steps for a clean setup:
- Download the server pack archive and extract it to a convenient folder.
- Navigate to the extracted server directory and locate the mods folder.
- Get the latest version of ServerPassword — Secure Password Protection for Minecraft Servers only from the official CurseForge page. Avoid third-party mirrors to prevent malicious code.
- Place the downloaded .jar file (for example, ServerPassword-1.19.x-1.0.4.jar) into the mods folder.
- Start the server and wait for the full load to complete.
- Run the command /serverpw set your_password in the server console. Use quotes if the phrase contains spaces.
Once the console confirms the password is set, your server is protected. On the next connection attempt, clients will need to enter that phrase.
Client-Side Setup
Players joining your protected server must also install the mod on their Forge client. The process mirrors the server side: download the same mod file and place it into the client's mods folder. When connecting, a password prompt appears. Enter the correct phrase once, and the mod remembers it for future sessions. No configuration files need to be touched on the client side.
If you administer the server and play on it yourself, keep both the client and server versions of the mod in sync. Updates are released regularly on CurseForge, adding support for newer Minecraft versions and improving stability.
Compatibility and Notes
Originally designed for Forge, this mod has been tested across several popular Minecraft versions, including the 1.19.x line and earlier releases. Community feedback also brought support for SpongeForge and Cauldron for older 1.7.10 packs. Key compatibility points include:
- SpongeForge support without additional configuration.
- Password changes via console command without restarting the server.
- Removal of the vulnerable data transfer protocol found in early builds.
- Dynamic port support for complex network setups.
- Free inclusion in custom modpacks for private use or public distribution.
For those using a modern launcher, the installation process is even simpler. The launcher can pull ServerPassword — Secure Password Protection for Minecraft Servers from its built-in catalog and install it with one click, saving manual file handling. This is especially useful when assembling a custom pack and adding protection quickly.
To download ServerPassword — Secure Password Protection for Minecraft Servers for Minecraft, always use the official CurseForge page. The mod is a practical choice for private servers with a limited circle of players, offering strong encryption, straightforward setup, and no data collection. Whether you host a small server for friends or a closed community, this tool keeps your world accessible only to those you trust.
In short, this is a reliable access control layer that works without the overhead of full plugin suites. Install it, set a phrase, and move on. The protection is active from the moment the server starts.