About UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async!
From SpigotMCAn incredibly lightweight plugin, that protects your server
• This is an incredibly lightweight plugin, that add an "admin-password" to your server.
• The main features should be considered the function of adding rights to check and creating a personal admin password for each player! All together, this creates an almost insurmountable barrier for the "hackers".
Each admin login attempt can be recorded in logs in a separate file in the plugin folder. Each activation and deactivation of the plugin can also be logged.
You can add a list of admin IP addresses and if someone wants to hack the admin's account, punishment will be applied to him.
It is also possible to add commands that the player can write even before entering the admin password, which is convenient if you use plugins like AuthMe.
It is worth saying that if a player is not recorded in the config, but has admin rights, then with the punish function enabled, you can punish a player who illegally obtained admin permissions as you like.
JAVA 17 REQUIRED
• Advantages over others "sequrity plugins"
1) Plugin regularly checks players for admin's permissions. Not just for OP and not just on join.
2) Large and fully customizable functionality that is not available in any other plugin
3) Asynchrony and multithreading, which ensure high performance. Plugin does not load the server at all.
4) Support for multiple servers
• Configurations
# Main settings
main-settings :
# Text formatting.
# LEGACY - color using &, MINIMESSAGE - color using <color>
# MINIMESSAGE was added in new versions (1.17+)
serializer : LEGACY
# If set to true - messages will be broadcasted to all servers on the proxy network.
proxy : false
# Plugin prefix
prefix : '&f&l [&c&lProtection&f&l ]'
# If set to false, players need to type the password in the chat
use-command : true
# Password input command. (specified without / at the beginning) (default - pas) (command is not going to be registered on Spigot)
pas-command : 'pas'
# Enable commands for adding new players to the config
enable-admin-commands : false
# Send anonymous statistics (advised not to disable)
enable-metrics : true
# Check for updates (advised not to disable)
update-checker : true
# Main check interval in ticks (do not touch if you don't know how it works)
check-interval : 40
# Encryption settings
encryption-settings :
# Whether to enable encryption
# When encryption is enabled, the password in data.yml must be specified in an already encrypted format and in a separate field encrypted-pass:
# To see what the password will look like in encrypted form, you can use the command /usp encrypt <password>
# However, if the auto-encrypt-passwords option is enabled, you can specify a regular password in the old pass: format in data.yml, and the plugin will automatically convert it.
enable-encryption : false
# Password encryption method (Supported types: BASE64, MD5, SHA224, SHA256, SHA384, SHA512, SHA3-224, SHA3-256, SHA3-384, SHA3-512)
# BASE64 - This "encryption" does not provide data protection; it is simply a method of converting data to another format for network transmission or storage.
# Use BASE64 only if you're afraid of "accidentally showing the file with passwords on the demo" and you don't need to specifically hide the data or to make encryption more complicated
# MD5 - An old encryption method prone to collisions (case when 2 different values in encrypted form give the same values)
# Use MD5 if you want to hide data and at the same do not want to use something hard-weight
# SHA256 and other SHA - variations of the SHA algorithm.
# Use SHA256 if you want to securely hide passwords without the possibility of decryption, and SHA512 for even more effective encryption
# SHA3-256 and other SHA3 - an analogue of the usual SHA with a modified encryption algorithm.
# Use SHA3 if you want to make non-standard and at the same time strong encryption
# You can use 2 or more encryption methods simultaneously for greater security of your passwords, so they cannot be easily brute-forced
# Encryption will be performed in order 1;2;3 and so on. It's important - deep encryption can take a lot of time, so don't use too many of them
# SALT is used to apply salt (random string to an existing password). You can only apply it once.
encrypt-method : 'BASE64;SALT;MD5'
# If you used any encryption method and for some reason decide to change it - you can specify it here so that you don't lose data
old-encrypt-methods : [ ]
# The length of the dynamically generated salt. The longer it is, the more effectively passwords are protected.
Highlights
From source dataGame versions
Supports 16 Minecraft versions, the newest being 26.1.
Loaders
Runs on Spigot and Paper.
Footprint
Rated a light load on a server.
UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async! on Nxeon
From our catalogue- One-click install
- Supported on Nxeon Minecraft servers, for Paper servers. We download it from SpigotMC, place it, and restart the server.
- Server side
- Required on the server
- Server type needed
- Spigot, Paper
- Server load
- light
- Smallest plan we suggest
- Minecraft — 2 GB (2 GB RAM). This follows our own load rating above, not a benchmark.
- Latest build
- 37.0, released 2026-06-06
Game versions by loader
| Loader | Game versions | Newest |
|---|---|---|
| Paper | 1.8 to 26.1 (16 versions) | 26.1 |
| Spigot | 1.8 to 26.1 (16 versions) | 26.1 |
From 10 recorded builds of UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async!.
Recent builds
| Build | Released | Game versions | Loaders |
|---|---|---|---|
| 37.0 | 2026-06-06 | 1.8 to 26.1 (16 versions) | Spigot, Paper |
| 37.0 | 2026-06-06 | n/a | Spigot, Paper |
| 36.5 | 2026-04-24 | n/a | Spigot, Paper |
| 36.4 | 2025-12-21 | n/a | Spigot, Paper |
| 36.3 | 2025-11-25 | n/a | Spigot, Paper |
| 36.2 | 2025-10-29 | n/a | Spigot, Paper |
Pick a server or deploy a new one above; it is installed in one click.
What kind of mod it is
From the catalogAdmin & protection
Permissions, moderation, anti-cheat and land protection for the people running the server.
Runs on your server
From source side supportSpigotMC lists UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async! as required on the server. Check its SpigotMC page to see whether players need it too.
Compatibility
- Game
- Minecraft
- Loaders
- SpigotPaper
- Runs on
- Serverrequired on the server
- Game versions
- 26.1 and 15 earlier
- Requires
- One-click install needs a Paper server.
Verified at the source
- ✓SpigotMCOfficial listing, checked 2026-10-02Open ↗
- ✓AuthorMcMeme821, as published on SpigotMC
- ✓LicenseNot published by the sourceFree
UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async!, answered
Generated from the mod’s own source data.
Do my players need to install UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async!?
SpigotMC lists UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async! as required on the server. Check its SpigotMC page to see whether players need it too.
Which loaders does it support?
Spigot and Paper.
Is it free?
Yes. UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async! is free to download from SpigotMC.
How do I add it to my Nxeon server?
Use “Add to a server” on this page, or open NxLabs from your dashboard. We install it, restart your server and switch it on.

Run UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async! on a Minecraft server.
Deploy in about a minute from $4.99 a month, then add UltimateServerProtector | Admins/Operators security plugin | Lightweight and Async! in one click.









