DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
VGSources
Blog

How to Disable Online Mode on a Minecraft Server (Offline Mode Safely)

A step-by-step guide to disabling online mode on a Minecraft Java server, with authentication requirements, UUID migration warnings, proxy settings, and recovery steps.
Length10 min Posted Quest giverVGSources Team

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To disable Mojang account verification on a Java Edition server, stop the server, open server.properties, change online-mode=true to online-mode=false, save the file, and restart. The server will then accept the username supplied by each client instead of checking it with Mojang’s account service.

That setting removes an important identity check. Anyone can enter under another player’s name, including an operator’s name, and changing an existing world can separate inventories and claim permissions from their original accounts. For anything beyond a tightly controlled private group, install a server-side authentication plugin before allowing players to connect.

As an Amazon Associate I earn from qualifying purchases.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What disabling online mode actually changes

Minecraft server online mode is an account-verification switch. With online-mode=true—the normal setting—the server asks Mojang’s account service to verify each connecting player. With online-mode=false, the server accepts the name presented by the client without that verification.

People also call this offline mode or, in some guides, cracked mode. Those labels describe the same server-side behavior; they do not provide a separate security system or a way to identify legitimate account owners.

Setting Identity check What the server trusts Main consequence
online-mode=true Mojang account verification is requested The verified account identity Players are tied to Mojang-assigned identities
online-mode=false No Mojang verification The username sent by the client Any player can attempt to use any name

This guide concerns a Java Edition dedicated server that uses server.properties. A hosting control panel may expose the same value behind a “ cracked,” “offline,” or “online mode” switch, but the underlying property is still online-mode. Panel labels and restart buttons differ, so use the file value as the authoritative check.

Decide whether offline mode is appropriate

Offline mode is most defensible for a small, private group where every player can be identified through a separate, trusted channel and the server is not exposed to unknown visitors. It is a poor default for a public server: the server itself no longer knows whether the name supplied at login belongs to the person using it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Use case Recommended setting Reason
Public server or open community Keep online-mode=true Unknown players need Mojang account verification.
Small private group that needs offline access online-mode=false plus authentication A login plugin can add a password gate, but the server still lacks Mojang verification.
Proxy network Proxy online mode on; backend servers offline mode The proxy performs the external identity check, while protected backends receive trusted connections.

If your real problem is a legitimate player seeing “Failed to verify username,” changing the whole server to offline mode should not be the first remedy. Check the player’s client and any proxy configuration first. Disabling verification can hide a configuration problem while creating a much larger impersonation risk.

Prepare the server before changing the property

Confirm that you can edit the server files

You need access to the server’s root directory or to the host’s file editor, plus permission to stop and start the server. The file you need is named server.properties. Do not edit it while the server is actively writing settings; stop the server cleanly first.

Make a complete backup

Copy the world directories, server.properties, and the server’s configuration and plugin data to a separate location. Keep the pre-change backup until every player has confirmed that their data and permissions are intact. A backup gives you a way to return to the earlier identity mapping if the mode change causes problems.

Warn players about identity changes

Tell existing players that the server may treat their offline identity as different from their verified identity. Player inventories and permissions for claims are associated with UUIDs. Switching modes changes a player from a Mojang-assigned UUID to an offline-generated UUID, so inventory contents, claim ownership, or other UUID-linked data can appear to be missing even though the world itself is still present.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Plan authentication before exposure

Do not make the server publicly reachable first and look for an authentication solution later. Install and configure an authentication plugin while the server is still private, then test the complete join, registration, and login flow with a non-administrator account.

Step-by-step: turn off online mode

1. Stop the server cleanly

  1. Announce a maintenance window to connected players.
  2. Use the server console’s normal stop command or the hosting panel’s graceful stop control.
  3. Wait until the process has shut down before editing files.

A clean stop lets the server finish saving the world and its player data. Avoid killing the process or editing a live file unless your host provides no other option.

2. Back up the current configuration and world

  1. Copy server.properties to a dated backup, such as server.properties.online-mode-backup.
  2. Copy the world and plugin data to storage outside the live server directory.
  3. Record the current value of online-mode and the server version so you can reproduce or reverse the change.

3. Edit server.properties

Open the file as plain text and find the line:

online-mode=true

Replace only the value with:

online-mode=false

Leave the property name, equals sign, and spelling unchanged. Do not add quotation marks. If the file already says false, the server is already configured for offline mode and the remaining work is authentication and testing.

4. Consider enforce-secure-profile separately

Some server setups check secure player profiles separately from online-mode. One commonly cited configuration change is:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
enforce-secure-profile=false

This is version-dependent and should not be treated as a universal requirement. A server can start normally and still reject non-premium players at login if its secure-profile setting remains enforced. Check the setting that your server version generated and test with the client types you intend to support. The current default and behavior of this property are not consistent enough to assume from the name alone.

5. Save, start, and read the console

  1. Save server.properties without changing its encoding or adding a second copy of the property.
  2. Start the server using the same launch command or panel control as before.
  3. Wait for the normal “server is ready” state, then inspect the console for login or plugin errors.
  4. Join from a controlled test account before sharing the address.

If the server does not load the new value, stop it again and confirm that you edited the active server directory rather than a backup or template directory. A hosting panel may regenerate properties from its own settings, in which case change the panel’s online-mode control and then verify the resulting file.

Rank #3
Mattel Games UNO Minecraft Card Game with Storage Tin,Ages 7+
  • The classic UNO card game builds fun on game night with a Minecraft theme.
  • UNO Minecraft features a deck and storage tin decorated with graphics from the popular video game.
  • Players match colors and numbers to the card on top of the discard pile as in the classic game.
  • The Creeper card unique to this deck forces other players to draw 3 cards.
  • Makes a great gift for kid, teen, adult and family game nights with 2 to 10 players ages 7 years and older, especially Minecraft and video game fans.

Add authentication before opening the server

With offline mode enabled, a username is not proof of identity. A player who enters an administrator’s name may be assigned that name’s privileges, including operator powers, unless another layer blocks the login. A whitelist does not solve this: in offline mode it also matches usernames, so an impostor using an allowed name can pass the same check.

Plugin choices named for offline authentication

Plugin Role Important limitation
LoginSecurity Adds a login mechanism for offline-mode players It does not restore Mojang account verification.
LibreLogin Provides password-based authentication for offline-mode servers It protects the server’s login flow, not the external account identity.
LockLogin Adds an authentication gate before normal play Players still need to protect their passwords and names.
AuthMeReloaded Password authentication; commonly used with Paper servers It adds a password gate and does not restore Mojang verification.

Plugin compatibility depends on your server software and version. Use one authentication system rather than stacking several that all intercept login events. Install it while the server is stopped, start the server, read its generated configuration, and set registration and login rules before inviting players.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Test the authentication flow

  1. Connect with a test account that has no operator privileges.
  2. Confirm that a first-time player is required to register or otherwise authenticate before interacting with the world.
  3. Disconnect and reconnect to verify that the login requirement is enforced every time.
  4. Test an incorrect password and confirm that it cannot enter the world.
  5. Only after those checks should you test with a trusted administrator account.

Keep the plugin’s configuration and account database in your backups. If you restore the world without restoring the authentication data, players may be unable to authenticate even though their builds remain.

Configure a proxy network correctly

Proxy networks have two different trust boundaries. The proxy is the public entry point; backend servers should not be reachable directly by players.

Component Online-mode value Purpose
BungeeCord or Velocity proxy true Verifies the player before forwarding the connection.
Backend Minecraft servers false Accepts the identity information forwarded by the trusted proxy.

Protect every backend from direct connections. Common protections include BungeeGuard and correctly configured IP forwarding. If a player can bypass the proxy and contact an offline-mode backend directly, the proxy’s account check no longer protects the server. Apply the proxy vendor’s forwarding and secret-token instructions exactly, then test both a normal proxy login and a blocked direct backend connection.

Understand UUID and player-data migration

Online-mode players receive Mojang-assigned UUIDs. Offline mode generates a different UUID from the presented name. The same human can therefore appear to the server as a different identity after the switch.

Rank #4
Mattel Games UNO Minecraft Card Game for Kids, Adults, Families & Parties, Deck & Special Rule Inspired by the Video Game, 2 to 10 Players
  • Now Minecraft lovers can play a special version of UNO!
  • Same as Basic UNO but features Minecraft characters and includes special Creeper rule card. Draw this card and the other players have to draw three more cards from the pile!
  • The goal is to get rid of all the cards in your hand.
  • First player or team to 500 wins.
  • When you're down to one card, don't forget to yell "UNO"!

Anything keyed to the old UUID can be affected, including:

  • Inventory and ender-chest contents.
  • Experience, statistics, and other player-specific data.
  • Claim ownership and trust lists.
  • Permission records stored by plugins.
  • Homes, economy balances, or other plugin data that uses UUIDs.

The world does not automatically know that the two UUIDs belong to the same person. Test the change on a copy of the world first, and keep the original backup untouched. If continuity matters, identify which plugins store UUID-based records and follow their documented migration procedure rather than manually guessing which files to rename.

Security checks after the switch

Audit privileged names

Review operator and other privileged accounts before anyone joins. In offline mode, a player can attempt to use any privileged username. Give administrative privileges only through a controlled authentication process, and avoid testing the server with a name that has powerful permissions unless the authentication plugin is already working.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not rely on the whitelist alone

A whitelist is still useful for limiting which names may enter, but it is not an identity system in offline mode. It compares the presented username, not proof that the person owns the corresponding Mojang account. Combine it with a login plugin and keep the server private until both controls have been tested.

Keep the public exposure narrow

Offline mode is a deliberate reduction in account assurance. If the server becomes a public community server, unknown players, or valuable persistent builds, restore online mode or place the server behind a properly configured online-mode proxy. Do not describe a password plugin as equivalent to Mojang verification; it protects a local password account and can be attacked or shared separately.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting common failures

“Failed to verify username” for a legitimate player

Leave online mode enabled while diagnosing this case. Check the client’s account session, the server address, and any proxy’s authentication and forwarding configuration. Switching the whole server to offline mode accepts unverified names, but it does not repair a failed legitimate session.

The server starts, but non-premium clients are rejected

Check whether enforce-secure-profile is enabled and whether your server version applies that check independently of online-mode. If your setup requires it, set the property to false, restart, and test again. Because this behavior varies by version, use the server’s generated configuration and release-specific documentation rather than copying the setting blindly.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Players can join with an administrator’s name

This is the expected risk of offline mode when no authentication layer is present. Stop public access, install and configure one of the authentication plugins, and retest with a non-privileged account. A whitelist by itself will not prevent the impersonation.

Inventories or claims appear empty after the change

Compare the player’s identity before and after the switch. The mode change can produce a different UUID, so the server may be looking at a new player-data record. Restore the backup if necessary and perform a deliberate UUID migration using the affected plugin’s documented method.

A proxy network rejects connections

Verify the split configuration: the public proxy should remain in online mode, while backends use offline mode. Then check that forwarding is enabled and that direct backend access is blocked. A mismatch at either boundary can produce login failures or expose the backend to impersonation.

The setting keeps reverting

Some control panels write server.properties when the server starts. Stop the server, change the panel’s online-mode setting, save it, and inspect the generated file before restarting. Editing a disposable copy or a template will not change the active instance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to restore online mode

  1. Stop the server cleanly and make a backup of its current offline-mode state.
  2. Open the active server.properties and change online-mode=false back to online-mode=true.
  3. If a proxy is involved, restore the intended online-mode arrangement: public verification at the proxy and only the backend values appropriate for that architecture.
  4. Review the authentication plugin’s instructions before disabling it. Removing a plugin without planning can leave its account data or login requirement in an unexpected state.
  5. Restart and test with a legitimate account, then verify inventories, permissions, and claims against the backup.

Returning to online mode restores account verification for new connections, but it does not automatically merge player records created under offline UUIDs. Treat the mode reversal as another identity migration and keep the offline backup until every affected player has been checked.

Practical decision checklist

  • Use offline mode only when: the group is small or otherwise trusted, the server is protected by a tested authentication plugin, and you have accepted the UUID migration consequences.
  • Keep online mode when: the server is public, players are unknown, administrators need strong account identity, or you are troubleshooting a single verification error.
  • For a proxy: verify accounts at the proxy, set backends to offline mode only behind that trusted proxy, and block direct backend connections.
  • Before going live: test registration, login, failed-password handling, operator protection, whitelist behavior, proxy forwarding, and player-data continuity from a backup copy.

The property change itself takes one edit and one restart. The safe implementation is the surrounding work: add authentication, protect privileged names, account for UUID changes, and keep the server’s public exposure consistent with the weaker identity guarantee.

Quick Recap

Bestseller No. 3
Mattel Games UNO Minecraft Card Game with Storage Tin,Ages 7+
Mattel Games UNO Minecraft Card Game with Storage Tin,Ages 7+
The classic UNO card game builds fun on game night with a Minecraft theme.; The Creeper card unique to this deck forces other players to draw 3 cards.
$11.66
Bestseller No. 4
Mattel Games UNO Minecraft Card Game for Kids, Adults, Families & Parties, Deck & Special Rule Inspired by the Video Game, 2 to 10 Players
Mattel Games UNO Minecraft Card Game for Kids, Adults, Families & Parties, Deck & Special Rule Inspired by the Video Game, 2 to 10 Players
Now Minecraft lovers can play a special version of UNO!; The goal is to get rid of all the cards in your hand.
$7.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.