VoidCaptcha

## VoidCaptcha

VoidCaptcha is a premium-style anti-bot and authentication plugin designed for Paper-based Minecraft servers. It combines captcha verification, secure account authentication, IP session management, and optional VPN detection into one lightweight and configurable solution.

The plugin is designed to protect servers from automated bot joins, unauthorized access, and account misuse while keeping the player experience smooth and secure.

---

# ✨ Features

## 🔐 Smart Authentication System

VoidCaptcha includes a built-in authentication system for player registration and login.

* Secure register/login flow
* Passwords stored in hashed format
* Configurable password rules
* Optional repeat-password confirmation
* Login attempt limits
* Login timeout support

The authentication system can be enabled or disabled from the configuration file, but keeping it enabled is recommended for the best stability and protection.

> Using additional authentication plugins alongside VoidCaptcha is not recommended, as VoidCaptcha already includes its own integrated authentication system.

---

## 🧩 Captcha Protection

Players must complete a captcha before accessing the main server world.

This helps:

* Prevent automated bot joins
* Reduce spam attacks
* Protect gameplay from unauthorized access

Players are temporarily placed into a dedicated captcha world until verification is completed successfully.

---

## 🌍 Captcha World Management

VoidCaptcha supports dedicated captcha worlds that can be managed directly in-game.

Features include:

* Automatic captcha world creation/loading
* Multiple captcha world management
* World loading/unloading
* Teleportation commands
* Visibility isolation between captcha and main worlds

---

## 🌐 IP Session System

The plugin includes a configurable session system that allows players to stay logged in from the same IP address for a selected duration.

If a valid session exists:

* Captcha can be skipped
* Login process can be skipped
* Player joins faster and more smoothly

Session duration is fully configurable.

---

## 🛡️ Optional VPN Detection

VoidCaptcha can optionally detect and block VPN connections using configurable API support.

This helps reduce:

* Alt-account abuse
* Bot attacks
* Suspicious connections

---

## 👁️ Visibility Manager

Players inside captcha worlds are hidden from players in the main world until authentication is completed.

This creates:

* Cleaner player experience
* Better isolation during verification
* Reduced confusion during login flow

---

# ⚙️ Configuration

VoidCaptcha includes a configurable `config.yml` file with support for:

* Captcha world settings
* Session duration
* Password requirements
* Login timeout settings
* Maximum login attempts
* Anti-VPN configuration
* Chat messages
* Title messages
* Authentication behavior

---

# 📜 Commands

## Admin Commands

Permission: `voidcaptcha.admin`

### `/voidcaptcha`

* `/voidcaptcha reload` — Reload configuration
* `/voidcaptcha help` — Display help menu
* `/voidcaptcha info` — Show plugin information

### `/vcworld`

* `/vcworld create <name>` — Create captcha world
* `/vcworld delete <name>` — Delete captcha world
* `/vcworld tp <name>` — Teleport to captcha world
* `/vcworld list` — List captcha worlds
* `/vcworld load <name>` — Load captcha world
* `/vcworld unload <name>` — Unload captcha world

---

## Player Commands

### `/changepassword`

Alias: `/cp`

Allows players to securely change their account password directly in-game without exposing passwords in chat or console logs.

---

# 🔒 Password Security

VoidCaptcha is designed with account security in mind.

* Passwords are hashed
* Password chat input is hidden
* Passwords are never stored in plain text
* Passwords are not exposed in console logs

---

# 🔄 Authentication Flow

1. Player joins the server
2. Existing IP session is checked
3. Player is teleported to captcha world
4. Captcha verification is completed
5. Authentication step begins
6. Player is moved to the main world
7. Inventory and visibility are restored

---

# ✅ Compatibility

Supported platforms:

* Paper
* Spigot
* Purpur

---

# 📌 Permissions

### `voidcaptcha.admin`

Grants access to all administrative commands.

Default: OP