About Secure OP
From SpigotMCPassword protect your server's op command!
Secure your servers OP command!
/
The current version works in 1.3+, and the previous version was written for older versions. You can download either from the version history/
Source code is on GitHub!
https://github.com/JavaSE77/SecureOP
How it works;
In normal spigot all you have to do to OP someone is type /OP (playername) and that’s it, the player has operator status and can do whatever they want. What does this plugin do to help stop that? Well it makes it so that when you attempt to OP someone you are prompted with a password, /OP (player name) (password) . The password can be changed in the config. file, also you can set it in the config. file to ban players who use the wrong password, and you can even set it to kick players that don’t have permission but still try to use the command.
Why do you need this?
One day I was on my server and one of the staff members asked to be oped to help me fix something, so I OPed him and we were working on it and I had to go, he said he would finish it and so I said ok and thanked him for his help. The next morning when I got on he had OPed one of his friends and they were having a lucky block battle with my lucky blocks plugin... Let's just say his friend wasn't honest and took some items from creative while he was at it (64x diamond blocks... RIP economy). If I would have installed this plugin sooner, it wouldn't have been a problem because he wouldn't have been able to OP him and he could have finished fixing the glitch we found.
You can kick players who you the /op command without permission/ correct password: (configurable)
When you type /op, you now get this message:
When you op someone, it will send a message to the chat: (configurable)
Works for deop too!
Update
This plugin now uses SHA-256 encryption to store passwords. Before you set the password using the setOpPassword command, your server will have no OP password. Please set this password!
The latest update added a custom 4J log filter to prevent the logging of any command that could contain the plain text version of your password.
If you forget your password, you can reset it by deleting the password.txt file in the SecureOP plugin folder.
Commands and permissions:
/OP (player) (password) – permission, SecureOp.op
/DEOP (player) (password) – permission, SecureOp.deop
/SetOpPassword (current password) (New password) - Permission, SecureOP.setPassword
#OP password is now stored in the password.txt file.
#Kick people without permission to use /op?
KickWithoutPerms: true
#Ban people who use incorrect passwords?
BanOnBadPassword: true
#This command will run whenever someone uses the wrong password (Set to '' to disable)
BadCommand: 'adminchat Someone is using /op!'
#Broadcast a message when a player is OPed?
BroadcastOP: true
#Allow offline players to be opped?
OPofflinePlayers: true
DEOPofflinePlayers: true
#Block /bukkit:op? (blocks all commands that include :op) WARNING! SETTING THIS TO FALSE CREATES A SERVER SECURITY PROBLEM
BlockBukkit: true
#Message online admins when a player tries to uses command /op? (Permission Secureop.receive )
MessageAdmins: true
#
#Messages. Use %player% for the target player, and %sender% for the command sender. %command% for /op or /deop
#
OpMsg: '&bPlayer &5%player% &bhas been OPed by &5%sender%'
DeopMsg: '&bPlayer &5%player% &bhas been deOPed by &5%sender%'
BadPassword: '&4Authentication failed.'
AdminMessageNoPerm: '&4Player %sender% tried to use /%command%!'
AdminMessageBadPass: '&4Admin %sender% tried to %command% %player%'
ErrorNoPerms: '&cError, you cannot use that command because it can damage the server!'
BanMessage: '&4YOU ARE NOT ALLOWED TO TRY AND GUESS THE PASSWORD OF THE COMMAND /op'
KickMessage: '&4You do not have permission to change the operator status of other players'
#This will intercept commands before they hit the command processor.
#Should prevent other command spy plugins from seeing this command
interceptOPcmd: true
permissions:
SecureOP.op:
default: op
SecureOP.deop:
default: op
Secureop.receive:
default: op
SecureOP.setPassword:
default: op
Highlights
From source dataGame versions
Supports 9 Minecraft versions, the newest being 1.16.
Loaders
Runs on Spigot and Paper.
Footprint
Rated a light load on a server.
Secure OP on Nxeon
From our catalogue- One-click install
- Supported on Nxeon Minecraft servers, for Paper servers. We download it from SpigotMC, place it, and restart the server.
- Server side
- Required on the server
- Server type needed
- Spigot, Paper
- Server load
- light
- Smallest plan we suggest
- Minecraft — 2 GB (2 GB RAM). This follows our own load rating above, not a benchmark.
- Latest build
- 1.16.5, released 2021-05-20
Game versions by loader
| Loader | Game versions | Newest |
|---|---|---|
| Paper | 1.8 to 1.16 (9 versions) | 1.16 |
| Spigot | 1.8 to 1.16 (9 versions) | 1.16 |
From 10 recorded builds of Secure OP.
Recent builds
| Build | Released | Game versions | Loaders |
|---|---|---|---|
| 1.16.5 | 2021-05-20 | 1.8 to 1.16 (9 versions) | Spigot, Paper |
| 1.5.1 | 2020-05-01 | n/a | Spigot, Paper |
| 1.5 | 2020-04-22 | n/a | Spigot, Paper |
| 1.11 | 2016-12-16 | n/a | Spigot, Paper |
| 1.11 | 2016-12-16 | n/a | Spigot, Paper |
| 1.10.2 | 2016-09-05 | n/a | Spigot, Paper |
Run Secure OP on a Minecraft server
Pick a server or deploy a new one above; it is installed in one click.
What kind of mod it is
From the catalogAdmin & protection
Permissions, moderation, anti-cheat and land protection for the people running the server.
Runs on your server
From source side supportSpigotMC lists Secure OP as required on the server. Check its SpigotMC page to see whether players need it too.
Compatibility
- Game
- Minecraft
- Loaders
- SpigotPaper
- Runs on
- Serverrequired on the server
- Game versions
- 1.16 and 8 earlier
- Requires
- One-click install needs a Paper server.
Verified at the source
- ✓SpigotMCOfficial listing, checked 2026-10-02Open ↗
- ✓AuthorJavaSE, as published on SpigotMC
- ✓LicenseNot published by the sourceFree
