Skip to content

Changelog

1.0.0

First release.

  • Two second factors: real six-digit authenticator codes, and a PIN on a keypad whose digits move every time it opens.
  • Ten single-use recovery codes, so a lost phone is not an admin ticket.
  • Native Bedrock forms through Floodgate, rather than a chest menu.
  • Lockdown while a player is challenged: movement, chat, commands, breaking, placing, interacting, dropping, damage in both directions, mob targeting and hunger, all held server-side.
  • Step-up confirmation on dangerous commands, covering five minutes per answer.
  • /lock all to challenge everyone at once, and /lock now for yourself.
  • Remembered devices for thirty days, stored as a hash of the address.
  • Rate limiting: five attempts, then a fifteen-minute lockout.
  • An in-game settings editor over every option.
  • Audit trail to console, file and an optional Discord webhook, with addresses masked.
  • YAML or MySQL storage; one enrolment covers a whole network, and MySQL being unreachable refuses logins rather than waving them through.