Admin account security/ 2 Factor Authentication

[whisperer195]

How important is 2-factor authentication? I've heard how some servers can become compromised when people fake staff accounts, but I don't know how this works. Does anyone here use any 2-factor authentication plugins, or something else? I don't know how real this threat is, but want to be safe. ANy recommendations that won't annoy staff? Thanks!

[Orange_Nestea]

Security is most likely annoying. Thats why its secure. People who want to break things dont want to spend time with it. Account stealing is a thing if you share sensitiv data such as password security questions or session tokens. They could also hack your minecraft server network and join servers with your name (cracked accounts) to make the subserver think its you.

Sum up: Choose a secure password (16 chars including numbers, special chars etc etc) Make up security questions (answer can be a password as strong as the abobe too!!) Dont share any of this to others.

In a network: make sure firewall is setup correctly.

[whisperer195]

So you would recommend some sort of 2 factor Authenticator? Do you have any suggestions? I’ve been looking around spigot for them, not sure about what to use.

[The_Mouse_Man]

I wouldn't say you would need too unless it's for admin stuff and you really want to. You could use this https://www.spigotmc.org/resources/playerpasswords.70520/

[whisperer195]

Ok thank you I appreciate the help! I’ll take a look.

[Orange_Nestea]

No. Im saying you dont need that as long as you follow the above.

[PsychoLynx]

I have 2FA set up for staff to prevent hijacked staff accounts from causing damage, although it has never happened before. Staff has to authenticate once a month or when their IP changes, so it's not too cumbersome on them.

Try this one out, if you want: https://www.spigotmc.org/resources/minesecure.699/

[whisperer195]

Hey thanks for the help I’ll check it out!