How to allow cracked versions on a Minecraft server
Want to open your Minecraft server to players who are using a cracked version of the game? Whether it's to play with friends, grow your community, or simply test things out, this complete guide walks you through every step.
We'll explain how to enable crack mode, which plugins to install to keep everything secure, and we'll also cover the risks and legal alternatives so you can make an informed decision.
This guide is provided for informational purposes. At LordHosting, we always recommend buying Minecraft from the official Mojang website. That said, we know reality is more nuanced, and we'd rather help you properly than leave you without guidance.
Table of contentsβ
- What is a cracked Minecraft server?
- How to configure your server in crack mode
- Securing your cracked server: the complete guide
- Risks of a cracked Minecraft server
- Legal alternatives to play Minecraft
- Managing a community with cracked players
- Recommended complete setup
- Frequently asked questions
- Key takeaways
What is a cracked Minecraft server?β
How Minecraft authentication worksβ
When you launch Minecraft and join a server, here's what happens behind the scenes:
- Your Minecraft client sends your username to the server
- The server contacts Mojang/Microsoft authentication servers to verify your account is legitimate
- If Mojang confirms, you're connected. Otherwise, you're denied.
This is called online mode β the default behavior of every Minecraft server.
What crack mode changes (online-mode=false)β
A cracked server, also called a non-premium server or offline server, simply disables this verification at step 2. The result: anyone can connect, whether they've purchased the game or not.
In plain terms, the server no longer asks "does this player have a real Minecraft account?". It accepts everyone, no questions asked.
Why do some administrators make this choice?β
The reasons are varied and often legitimate:
- Playing with friends: one of your friends hasn't bought the game yet and you want them to try it
- Accessibility: in some countries, Minecraft's price represents a significant expense
- Test server: you're developing plugins or maps and need test accounts
- Larger community: you want to reach as many players as possible, including those without a premium account
How to configure your server in crack modeβ
The process is simple and quick. It takes about 2 minutes.
Step 1: Edit the server.properties fileβ
-
Log into your LordHosting management panel
-
Go to the File Manager tab
-
Open the
server.propertiesfile β this is your server's main configuration file -
Find the following line:
online-mode=true -
Replace
truewithfalse:online-mode=false -
Click Save
It's as simple as that! But don't stop here.
Step 2: Restart the serverβ
Go back to your panel's home page and click Restart. The server will apply the change on reboot.
As soon as online-mode is set to false, anyone can connect with any username. A malicious player could use an administrator's username and gain full permissions. Installing an authentication plugin is absolutely mandatory.
Step 3: Install an authentication pluginβ
This is the most important step. Without this plugin, your server is wide open.
Option 1: AuthMe Reloaded β the trusted classicβ
AuthMe Reloaded is the most widely used authentication plugin for Minecraft servers worldwide. It's free, reliable, and regularly updated.
How to install it on LordHosting:
- On your panel, go to 1-click Plugins
- Type AuthMe in the search bar
- Click Install
- Restart your server
How it works for players:
- First connection: the player types
/register password passwordto create their account - Subsequent connections: they type
/login passwordto authenticate - Before authentication: the player is frozen β they can't move, chat, or break blocks
It's seamless and efficient. Your players get used to it in seconds.
Option 2: LibreLogin β the modern alternativeβ
If you're using a proxy like Velocity or BungeeCord (for example to link multiple servers together), LibreLogin is an excellent alternative.
Its advantages:
- Built natively for Velocity and BungeeCord
- Automatic session management (players don't need to re-login every time)
- More modern interface and simplified configuration
- Compatible with the latest Minecraft versions (1.20+, 1.21+)
Option 3: FastLogin β hybrid modeβ
FastLogin is a complementary plugin that creates a hybrid server:
- Premium players (who bought the game) are authenticated automatically via Mojang β no
/loginneeded - Cracked players go through classic authentication with AuthMe
It's the best solution if you want to offer an optimal experience to both types of players.
Securing your cracked server: the complete guideβ
A cracked server naturally attracts more risks than a premium one. Here are the essential protections, ranked by priority.
Protection #1: Authentication (mandatory)β
We can't stress this enough: AuthMe or LibreLogin is non-negotiable. Without it, anyone can impersonate your players and administrators.
Protection #2: Anti-botβ
Cracked servers are prime targets for bot attacks (hundreds of fake players connecting simultaneously to crash your server).
| Plugin | Price | Description |
|---|---|---|
| EpicGuard | Free | Lightweight and very effective, blocks suspicious connections |
| BotSentry | Premium | More comprehensive, with advanced checks (captcha, etc.) |
Protection #3: Permission managementβ
Install LuckPerms (free) to precisely control what each player can do:
# New players don't have access to dangerous commands
default:
permissions:
- -minecraft.command.op
- -minecraft.command.gamemode
- -minecraft.command.give
- -minecraft.command.teleport
Protection #4: Block actions before authenticationβ
In the AuthMe configuration (config.yml), make sure unauthenticated players can't do anything:
settings:
restrictions:
allowMovement: false
allowChat: false
allowCommands: []
allowInteraction: false
allowFlight: false
Protection #5: Anti-cheatβ
Cracked players tend to use modified clients (hacks) more often. An anti-cheat is highly recommended:
- Vulcan (premium) β the most complete and reliable
- Grim (free) β good open-source alternative
Protection #6: Anti-DDoSβ
Good news if you're with LordHosting: Anti-DDoS protection is included in all our plans. You don't need to configure anything, it's active by default.
Risks of a cracked Minecraft serverβ
Security risksβ
| Risk | Severity | What can happen | How to protect yourself |
|---|---|---|---|
| Identity theft | Critical | A player connects with an admin's username | AuthMe / LibreLogin |
| Bot attacks | High | Hundreds of bots crash the server | EpicGuard / BotSentry |
| Cheating | Medium | Modified clients (fly, speed, x-ray...) | Vulcan / Grim |
| DDoS attacks | High | Server becomes unreachable | Anti-DDoS (included at LordHosting) |
| Spam / Flood | Medium | Repetitive messages in chat | Anti-spam plugin + moderation |
Legal aspects: what the law actually saysβ
This is the question everyone asks. Let's be clear:
Hosting a server in online-mode=false is not illegal. You're not distributing the game, you're not providing a crack β you're simply disabling a server-side verification.
That said, there are nuances to be aware of:
What Mojang's terms of service sayβ
The Mojang EULA states that players must own a legitimate copy of the game. By disabling online-mode, you technically allow non-legitimate players to play.
What has actually happenedβ
In practice, Mojang has never sued a server administrator for enabling crack mode. Mojang/Microsoft's legal actions focus on:
- Download websites that distribute pirated versions of the game
- Commercial servers that violate monetization rules (pay-to-win advantages)
- Game copies redistributed under another name
The case of large cracked serversβ
Servers like Funcraft, Ascentia, and Rinaorc have operated for years in crack mode with thousands of players, without ever receiving a cease-and-desist from Mojang. This shows that in practice, Mojang tolerates this practice as long as it's not accompanied by illegal distribution of the game.
The legal risk is very low for a community server. Mojang targets distributors of pirated copies, not server administrators. However, their terms of service don't officially authorize it β it's a gray area.
Legal alternatives to play Minecraftβ
Before enabling crack mode, know that there are several legal and affordable ways to play Minecraft:
| Alternative | Price | Description | Who is it for? |
|---|---|---|---|
| Minecraft Demo | Free | Official trial version from the launcher | Those who want to try before buying |
| Xbox Game Pass | ~$9.99/month | Minecraft Java + Bedrock included | Regular gamers who also want other games |
| Xbox Game Pass PC | ~$1 first month | Trial offer for new subscribers | Cheapest way to get the game legally |
| Minecraft Education | Free | Educational version for schools and universities | Students and teachers |
| Buy on sale | ~$15-20 | The game sometimes goes on sale on the Microsoft Store | Permanent solution |
| LordHosting free trial | Free | Test a Minecraft server for 24 hours with no commitment | Admins who want to test our services |
With Xbox Game Pass at $1 for the first month, you get both Minecraft Java AND Bedrock legally. It's often cheaper than a coffee and saves you all the headaches associated with crack mode.
Managing a community with cracked playersβ
Establish clear rules from the startβ
Good rules are the foundation of any server, but even more so on a cracked one. Here are the essential points to include:
- Strictly forbidden to impersonate another player
- Mandatory registration with
/registeron first connection - Clear penalties: warning, mute, kick, temporary ban, permanent ban
- Zero tolerance for cheating and modified clients
- Respect between premium and non-premium players
Encourage game purchase (without forcing)β
Rather than stigmatizing cracked players, motivate them positively to buy the game:
- Create a "Premium" rank with cosmetic perks (particles, name color, emotes)
- Grant access to certain VIP areas or exclusive mini-games to verified accounts
- Use FastLogin to automatically detect premium accounts and assign benefits
- Regularly share Minecraft promotions on your Discord
Build a solid moderation teamβ
A cracked server statistically attracts more problematic behavior. Be prepared:
- Recruit active moderators and train them
- Install LiteBans or AdvancedBan to manage penalties efficiently
- Set up a reporting system (ReportSystem plugin or via Discord)
- Keep logs of everything (CoreProtect is excellent for this)
Community and Discordβ
Create a Discord server for your community. It's essential for:
- Communicating rules and updates
- Allowing players to report issues
- Building connections between your players
- Managing moderator applications
Recommended complete setupβ
Here's the complete plugin kit for a secure and well-managed cracked Minecraft server:
| Plugin | Role | Price | Priority |
|---|---|---|---|
| AuthMe Reloaded | Password authentication | Free | Mandatory |
| FastLogin | Hybrid premium/crack mode | Free | Highly recommended |
| EpicGuard | Anti-bot protection | Free | Mandatory |
| LuckPerms | Permission management | Free | Mandatory |
| SkinsRestorer | Skins for cracked players | Free | Recommended |
| Vulcan | Anti-cheat | Premium (~$15) | Highly recommended |
| LiteBans | Moderation and penalties | Premium (~$8) | Recommended |
| CoreProtect | Logs and rollback | Free | Recommended |
All these plugins can be installed in 1 click from the LordHosting panel.
Frequently asked questionsβ
Can Mojang shut down my cracked server?β
In theory, Mojang's terms of service don't authorize it. In practice, no server has ever been shut down solely for enabling online-mode=false. Mojang focuses its efforts on websites distributing pirated versions of the game, not on community servers.
Can premium players join a cracked server?β
Yes, absolutely. A player with an official Minecraft account can join a server in online-mode=false. The only difference: their username is no longer protected by Mojang. With FastLogin, you can automatically verify premium accounts and offer them a connection without /login.
Do skins work on a cracked server?β
By default, no. Skins are loaded from Mojang's servers and require authentication. Install the SkinsRestorer plugin (free) to allow all players to display skins, even without a premium account.
Does crack mode affect server performance?β
Not at all. The online-mode setting only concerns identity verification at login. Your server's performance depends on RAM, processor, number of players, and installed plugins β not the authentication mode.
Is it compatible with all Minecraft versions?β
Yes. The online-mode=false setting works on all Minecraft Java versions, from 1.8 to 1.21+. The AuthMe and FastLogin plugins are also compatible with the vast majority of versions.
Can I switch from a cracked server to a premium server (and vice versa)?β
Yes, simply change the online-mode value in server.properties and restart. Be careful though: if you switch to premium mode, cracked players will no longer be able to connect. Make sure to warn your community in advance.
Should my BungeeCord/Velocity server be in online-mode false?β
With a proxy (BungeeCord or Velocity), the setup is slightly different:
- The proxy handles authentication β
online_mode: true(in the proxy config) - The backend servers β
online-mode: false(inserver.properties)
This is the normal and recommended setup. The proxy verifies identity, the servers behind it trust the proxy.
Key takeawaysβ
To enable crack mode:
- Set
online-mode=falseinserver.properties - Install AuthMe (mandatory) and FastLogin (recommended)
- Add EpicGuard against bots and LuckPerms for permissions
Main risks:
- Identity theft β solved by AuthMe
- Bot attacks β solved by EpicGuard
- Cheating β solved by an anti-cheat (Vulcan)
Legal side:
- Not illegal, but not authorized by Mojang's terms of service
- No server has ever been shut down for this reason
- Mojang targets distributors of pirated copies, not servers
Ready to launch your Minecraft server?β
At LordHosting, all our Minecraft servers are compatible with online-mode=false. With our 1-click plugin installation system, you can set up AuthMe, FastLogin, and all security plugins in minutes.
And if you're not sure, take advantage of our free 24-hour trial to test without commitment.
Discover our Minecraft server plans
Got a question? Our support team is available 7 days a week to help you configure your server.