DDC - DragonDirtCore (TwoFactorOP/AutoDeop)
DDC - DragonDirtCore is a powerful Minecraft 1.20.4+ server security & management plugin designed to protect your server against unauthorized access, admin abuse, and account hijacks.

This plugin adds multi-layer protection with Google Authenticator 2FA, whitelist enforcement, auto-deop, IP locking, and item showcase features. It is lightweight, async-optimized, and integrates seamlessly with popular plugins like LuckPerms and PlaceholderAPI.

Key Features

• 2FA Authentication (Google Authenticator)
  
  • Players in the 2FA whitelist must verify with a 6-digit OTP code when joining.
    
    
  • Accounts are frozen until verified. Wrong or expired codes result in kick.
    
    
  • Admins can easily set up 2FA for players via /2fa setup <player>.
    
• ⚡ Whitelist & OP Protection
  
  • Only whitelisted players can keep OP or use Creative/Spectator modes.
    
    
  • Automatic checks on join, OP change, gamemode switch, and every 30s.
    
    
  • Unauthorized OPs are instantly deopped & forced to Survival.
    
• IP Whitelist Protection
  
  • Bind accounts to a fixed IP.
    
    
  • If someone logs in from a different IP → instant auto-ban + admin alert.
    
    
  • Example: /2fa setip Steve 192.168.1.100.
    
• Auto-Deop & Auto-Gamemode
  
  • Automatically remove OP from players on join/quit.
    
    
  • Force gamemode back to Survival if a non-whitelisted player switches.
    
• Item Showcase
  
  • Players can show items in chat with or [item].
    
    
    [*]Supports LuckPerms placeholders for rank display.
    
    
  
  

⚙️ How It Works

• Multi-layer Security Checks:
  
  • On Join: Player is scanned for OP, gamemode, and 2FA status.
    
    
  • On OP Command: Prevents unauthorized players from being opped.
    
    
  • On Gamemode Change: Reverts Creative/Spectator to Survival if not whitelisted.
    
    
  • Scheduled Checks: Every 30s (async), ensures server stays secure.
    
• Zero Lag Design:
  
  • Runs checks asynchronously.
    
    
  • Uses caching to prevent repeated scans (max 1 per 5s per player).
    
    
  • Skips trusted players in whitelist to save resources.
    

✅ Dependencies

• Required: Paper/Spigot, PlaceholderAPI
  
  
• Optional: LuckPerms (rank placeholders), ChatFormat (chat integration)
  

With DDC - DragonDirtCore, your server is protected from:

• OP hijacks
  
  
• Admin abuse
  
  
• Stolen accounts
  
  
• Unauthorized gamemode usage
  

Simple to set up, but extremely hard for attackers to bypass.