Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Godlike.Host offers hosted Minecraft Java servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
To disable online mode, stop the server, open its server.properties file, change online-mode=true to online-mode=false, save the file, and start the server again. This makes the server accept the username presented by a client instead of asking Mojang’s account service to verify it. Install and configure an authentication plugin before allowing untrusted players to connect: offline mode removes account ownership checks, and a whitelist by itself cannot prevent username impersonation.
What disabling online mode actually changes
A Minecraft server normally runs with online-mode=true. During login, it asks Mojang’s account service to verify that the connecting client is authenticated for the username it presents. When you set online-mode=false, that verification step is skipped. The server accepts the name supplied by the client and lets the connection continue to the normal login and gameplay checks.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Administrators and hosting panels often call this offline mode or cracked mode. Those labels describe the authentication setting; they do not describe a separate Minecraft edition, and they do not provide any built-in password or identity protection. A player can still need the correct game version and server address, but the server no longer proves that the player owns the account named at login.
Disabling the setting can help a private group whose members cannot use the normal account service, or a proxy network in which the public-facing proxy performs authentication. It is a poor default for a public server. Anyone who can reach an offline-mode server can attempt to use another player’s name, including an operator’s name, unless an additional authentication layer blocks the attempt.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Before you change the setting
Prepare the server before editing the property. A few minutes of preparation can prevent lost inventories, broken claims, or an account takeover immediately after the restart.
- Confirm why you are changing it. If a legitimate player is seeing “Failed to verify username,” first investigate the client session, account launcher, server availability, or proxy configuration. Turning off verification treats the symptom by removing the identity check for everyone.
- Tell players about the restart. Use the server console’s
stopcommand rather than killing the process. This allows the world and player data to be saved cleanly. - Back up the complete server directory. Include the world folders,
server.properties, permissions files, plugin folders, and any proxy configuration. Keep the backup outside the live directory and label it with the date and the old authentication mode. - Record current identities. Note the usernames, operator accounts, whitelist entries, claims, economy records, and plugin accounts that matter. A mode change can cause identity-related data to be associated with different UUIDs.
- Check access control. Decide who will be allowed to join during the first test. A temporary firewall rule, private network, or invite-only window is safer than exposing an unprotected offline server while you configure authentication.
Step-by-step: disable online mode on a standalone server
- Stop the server cleanly. In the server console, enter
stopand wait until the process exits. If you use a hosting panel, use its Stop control and wait for the status to show that the server is offline. - Open the server’s root directory. This is the folder containing the server JAR and the
worlddirectory. Do not edit a similarly named file inside a world or plugin folder. - Open
server.propertiesas plain text. Make a backup copy before changing anything. The file is normally a simple key-value list; preserve the existing spelling and the equals-sign format. - Change the authentication property. Find
online-mode=trueand replace only the value withfalse, producingonline-mode=false. If the line is missing, add it as its own line. Do not put quotation marks around the value. - Review secure-profile enforcement. Some server versions check
enforce-secure-profileseparately fromonline-mode. One commonly reported setup isenforce-secure-profile=falsewhen non-premium clients are rejected after the server starts, but this behavior is version-dependent and should be tested on the exact server build you run. Do not change unrelated properties just because they appear nearby. - Save the file without changing its encoding. Close the editor after confirming that the final values are present. A panel may overwrite the file when it regenerates settings, so check the panel’s configuration page if your edit disappears.
- Start the server again. Watch the console for a normal startup and wait until it reports that the server is ready. A successful startup does not prove that authentication is secure; it only shows that the property was accepted.
- Test from a controlled client. Connect from a permitted account or test machine. Confirm that the expected player name appears, then test a second, intentionally different name only in a private environment. Never perform an impersonation test on a public server.
If the server changes online-mode back to true, stop it before editing again and inspect the hosting panel, startup script, container environment, or configuration-management tool that may be rewriting server.properties.
Free tools Windows power users keep installed
One-click scans. No signup required.
Adding authentication after the change
Offline mode has no native password gate. Install an authentication plugin compatible with your server software and Minecraft version before inviting players. Commonly named options include LoginSecurity, LibreLogin, LockLogin, and AuthMeReloaded for Paper-based servers. Plugin names and commands change over time, so follow the documentation shipped with the exact build you install rather than copying commands from an unrelated version.
| Layer | What it protects | What it does not prove |
|---|---|---|
| Offline mode | Allows clients to connect without the account-service check. | It does not establish ownership of a username. |
| Authentication plugin | Requires a player to register and log in with a password or another plugin-supported credential. | It does not restore Mojang account verification or make a stolen password safe. |
| Whitelist | Limits connections to names listed by the server. | It cannot tell whether the person presenting a listed name is the real owner. |
| Permissions and protection plugins | Control commands, regions, claims, and administrative actions after login. | They cannot identify an impostor before that player authenticates. |
Configure the plugin before opening the port
- Stop the server and install the plugin JAR in the correct plugin directory for your server software.
- Start the server once so it creates its configuration, then stop it again before making security changes.
- Set registration and login rules according to the plugin’s documentation. Require authentication before chat, commands, inventory access, movement, and interaction where the plugin supports those controls.
- Use a long, unique password for every account. Never reuse an email, launcher, or administrative password.
- Enable the plugin’s protections against repeated guesses, rapid registration, and duplicate sessions when those settings exist.
- Test registration, logout, reconnect, password failure, and an unregistered username from a private connection. Check that an unauthenticated player cannot run operator commands or access valuable containers.
- Only after the tests pass should you remove the temporary network restriction or advertise the server.
An authentication plugin is an additional login system, not a workaround that makes offline mode equivalent to online mode. The server still receives an unverified name, and the plugin database becomes critical account data that should be backed up and protected.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
The security consequences you must accept
Username impersonation
With verification disabled, a client can present any username. If a player enters an operator’s name and no authentication layer stops the connection, the server may treat that session as the operator’s identity. Depending on your permissions and plugins, the attacker could run administrative commands, alter worlds, read private data, or grant additional access.
Why a whitelist is not enough
A whitelist compares the presented name with its list. In offline mode, that name is not tied to a verified account, so an impostor can still pass the same name check. Keep a whitelist for reducing who can attempt to connect, but pair it with login authentication and least-privilege permissions.
Passwords become a new target
Once you add plugin-based authentication, the security of the server depends on password handling, plugin updates, and backups as well as network security. Do not publish registration passwords, place credentials in screenshots, or give every player operator privileges. Remove abandoned accounts and rotate administrative credentials if you suspect that a password was exposed.
Offline mode is not a privacy boundary
It does not encrypt gameplay traffic, hide the server address, or prevent denial-of-service attempts. Use the operating system firewall, a restricted network, and the server software’s normal moderation and backup practices. Treat the server as publicly reachable unless the network itself proves otherwise.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
What happens to existing players and worlds
Minecraft and many plugins store player data under UUIDs. Online-mode UUIDs are assigned from the verified account identity; offline mode generates a different UUID from the presented name. Switching an established world between modes can therefore make the same human appear to be a new player.
Possible symptoms include an empty inventory, missing ender chest contents, reset statistics, lost homes, missing claim ownership, and permissions that no longer apply. The exact impact depends on the server software and each plugin’s data format. Do not delete the old player files while troubleshooting; they are your recovery path.
A safer migration procedure
- Make a full backup while the server is stopped.
- List the affected usernames and identify which UUID format the world and plugins currently use.
- Change the mode on a copy of the server, not the live world, and let the affected accounts join once.
- Compare inventories, claims, homes, ranks, and plugin records with the backup.
- Use only documented migration tools or plugin-supported UUID conversion. Manually renaming files can corrupt data or create collisions.
- Restore the backup and repeat the migration with a tested procedure if anything important is missing.
If preserving established identities is more important than allowing unverified clients, leave online mode enabled and solve the original login problem instead of changing the world’s identity system.
Proxy networks: where to put each setting
For a BungeeCord or Velocity network, the usual arrangement is to keep authentication at the public-facing proxy and run the backend servers in offline mode so they accept connections forwarded by that trusted proxy. In that design, set the proxy’s online-mode=true and configure the backend servers with online-mode=false.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Offline backends must not be reachable directly from the internet. A player who bypasses the proxy can otherwise connect with an arbitrary name and avoid the proxy’s authentication. Use a firewall or private network to allow backend traffic only from the proxy, and configure the proxy’s forwarding protection, such as BungeeGuard or the secure forwarding mechanism supported by your Velocity setup. Follow the exact forwarding format required by your proxy and backend versions.
Proxy checklist
- Authenticate players at one public entry point.
- Block public access to every backend port.
- Enable and verify signed or secret-based forwarding where supported.
- Test a direct backend connection from outside the proxy network; it should fail.
- Test that the backend receives the intended UUID, username, and permissions from the proxy.
- Keep proxy and backend software updated together and back up both configurations.
Troubleshooting after setting online-mode=false
The server starts, but non-premium players are rejected
Check the exact disconnect message and the server version. Some builds enforce secure profiles separately from online-mode. If your build uses that check and rejects the clients you intend to support, review enforce-secure-profile and the server software’s current documentation before changing it. Because this behavior is version-dependent, do not assume that a setting used by one release applies to another.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The property has no effect
Verify that you edited the active server directory, not a backup or a different instance. Stop the server before editing, confirm the line reads exactly online-mode=false, and inspect the startup log for the path or configuration source being loaded. Hosting panels may expose a separate “online mode” switch that overwrites the file.
Players lose inventories or claims
Stop the server and restore the pre-change backup if necessary. The likely cause is a UUID change, not a missing item. Identify the affected plugin and use its supported player-data or UUID migration method. Do not create replacement accounts until you have preserved the original files.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
An operator account was impersonated
Immediately stop public access, remove operator status from the affected name, and inspect console logs, permissions, world changes, plugin data, and backups. Change every password used by the server’s authentication plugin and administrators. Revoke unknown accounts, restore clean data where appropriate, and do not reopen the server until login authentication and backend network restrictions have been tested.
A legitimate player still sees “Failed to verify username”
If you have not disabled online mode, check that the player is signed into the intended account, the launcher session is valid, and the server or proxy can reach the account service. Restarting the launcher and checking for an outage may resolve a temporary session problem. On a proxy network, verify that the proxy—not an offline backend—is the public login point. Disabling verification should be the last resort because it changes the identity guarantees for every player.
How to turn online mode back on
- Warn players that identity-linked data may change again and make a complete backup.
- Stop the server cleanly.
- Set
online-mode=falseback toonline-mode=truein the activeserver.propertiesfile. - Remove or disable the offline authentication plugin only after you understand whether it stores separate account data. Keep its data as a backup.
- Start the server and test with a legitimately authenticated account before reopening access.
Switching back can produce another UUID mismatch for players who joined only while offline mode was enabled. Restore the appropriate backup or follow documented migration procedures rather than deleting the newer files.
When offline mode is an acceptable choice
| Situation | Recommended approach | Reason |
|---|---|---|
| Small, private group on a trusted network | Offline mode can be used with a strong authentication plugin and restricted network access. | The group can control who reaches the server, while the plugin supplies the missing login gate. |
| Public server with unknown players | Keep online-mode=true. |
Verified account identity is the safer baseline; a whitelist and plugin passwords do not replace it. |
| Proxy network with authenticated public entry | Keep the proxy online, set protected backends offline, and firewall the backends. | The proxy performs the public authentication while backend servers trust only the proxy. |
| Temporary troubleshooting of account-service errors | Investigate the client, account session, service availability, and proxy first. | Changing the global authentication model can create larger security and data problems than the original error. |
The setting is easy to change; making the resulting server safe is the difficult part. For a standalone public server, leave online mode enabled. For a private or proxied setup, disable it only with a tested authentication layer, protected network boundaries, current backups, and a plan for UUID-related data.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
