How to set up whitelisting on a Minecraft server
Setting up a whitelist on your Minecraft server is a crucial step for controlling who can access your world, ensuring a private and secure environment for your chosen community. A Minecraft whitelist, known as an allowlist for Bedrock Edition servers, acts as a gatekeeper, permitting entry only to specific player accounts that have been pre-approved. This server-side feature is an effective way to prevent unwanted players from joining, making it ideal for private servers, friend groups, or communities that require controlled access.
![]()
When the whitelist is active, the server meticulously checks every incoming connection against its approved list. If a player attempts to join and their account is not found on this list, their connection will be rejected, and they will receive a clear message stating, “You are not whitelisted on this server.” This immediate feedback ensures that unauthorized players understand why they cannot connect. For Java Edition servers, this list is stored in a file named whitelist.json, while Bedrock Edition servers utilize an allowlist.json file to manage their approved players.
There are some important distinctions regarding operator (OP) status and the whitelist. On Java Edition servers, players with operator privileges typically possess the ability to bypass the whitelist, meaning they can connect to the server even if their username is not explicitly added to the whitelist. However, this convenience does not extend to Bedrock Edition. For Bedrock Edition players, regardless of their operator status, they must always be explicitly whitelisted to join the server. Another critical setting for Java Edition, particularly from version 1.17 onwards, is enforce-whitelist=true. When this setting is enabled, if the whitelist is updated (e.g., a player is removed), any non-whitelisted players who were already connected to the server will be immediately kicked, further enhancing security and real-time enforcement of the whitelist.
Setting Up Whitelisting for Minecraft Java Edition
The process for enabling and managing a whitelist on a Minecraft Java Edition server is straightforward and can typically be performed either directly in-game using commands or via the server’s console interface. To begin, you must ensure you have operator (OP) privileges on the server or direct access to the server’s console. Without these permissions, you will not be able to execute the necessary commands.
- Enable the Whitelist: The first step is to activate the whitelist feature. In-game, type
/whitelist onand then press Enter. If you are using the server console, omit the leading slash and simply typewhitelist on. This command will turn on the whitelisting functionality for your server. - Add Players: Once the whitelist is active, you need to add each approved player individually. For each player you wish to grant access, use the command
/whitelist add [playername]. Remember to replace[playername]with the player’s exact Minecraft username, paying close attention to spelling and capitalization. Repeat this command for every player you want to include. - View Whitelisted Players: To review the current list of players who are permitted to join your server, you can use the command
/whitelist list. This will display all usernames currently registered on your whitelist. - Remove a Player: Should you need to revoke a player’s access, use the command
/whitelist remove [playername]. Again, ensure the exact username is used to successfully remove them from the whitelist. - Disable the Whitelist: If at any point you decide you no longer need the whitelist feature, you can turn it off using the command
/whitelist off. This will allow any player to join the server, provided other restrictions are not in place. - Reload the Whitelist: Occasionally, especially if you’ve made manual changes to the
whitelist.jsonfile or if commands don’t seem to be taking immediate effect, you can force the server to reload the whitelist from its configuration file. Use the command/whitelist reloadto refresh the list.
Setting Up Whitelisting for Minecraft Bedrock Edition
For Minecraft Bedrock Edition servers, the process of setting up an allowlist (their equivalent of a whitelist) often involves interacting with your server’s control panel or console, with slightly different terminology and command structures.
- Access Control Panel: Begin by logging into your server’s control panel, which is typically provided by your hosting provider.
- Navigate to Server Settings: Within the control panel, locate the “Config Files” section and then navigate to “Bedrock Server Settings.” This is where many core server configurations are managed.
- Enable Whitelisting: Look for an option specifically labeled “Whitelisting” or “Allowlisting” and set it to “Enabled.” This action activates the feature.
- Save and Restart: After enabling the whitelisting option, it is crucial to save your changes and then restart your Minecraft Bedrock server. This ensures that the new configuration is properly loaded and applied.
- Add Players via Console: Once the server has restarted with whitelisting enabled, you will need to add players. Access your server’s console (either through the control panel or directly if you host it yourself) and use the command
allowlist add [player]. It’s important to note that Bedrock Edition typically usesallowlistcommands instead ofwhitelist. - Crossplay Server Considerations: For servers that support crossplay between Java and Bedrock editions, there’s a specific nuance for Bedrock players. Sometimes, Bedrock players might need to successfully join the server at least once before they can be effectively whitelisted. This initial join helps the server record their character’s unique identifier or name. Furthermore, when adding Bedrock players via console commands on a crossplay server, their username might require a period prefix (
.) for the command to correctly identify them, for example,allowlist add .[playername].
Important Tips for Effective Whitelisting
To ensure a smooth and secure whitelisting experience, keep the following tips in mind:
- Operator Permissions are Key: Always confirm that you have operator (OP) permissions on the server. Without them, you won’t be able to execute whitelist commands in-game, which are essential for managing player access.
- Reload or Restart After Changes: Whenever you make changes to the whitelist, especially if you’re directly editing files like
server.propertiesorwhitelist.json, it’s vital to either restart your server or use the/whitelist reloadcommand (for Java Edition) to ensure those changes are fully applied and recognized by the server. - Ensure Online Mode: For the whitelist to function securely and effectively, your server must be running in “online mode.” This is configured by setting
online-mode=truein yourserver.propertiesfile. Running in offline mode compromises the security of player authentication, making whitelists less reliable. - Utilize Hosting Panel Features: If you are using a hosted server solution, leveraging the hosting panel’s dedicated whitelist features is often the most user-friendly and simplest method for managing your server’s whitelist. These interfaces typically streamline the process, reducing the need for manual command entry.
Common Mistakes to Avoid When Whitelisting
Even with clear instructions, certain common errors can occur during the whitelisting process. Being aware of these can help you troubleshoot and prevent issues:
- Incorrect Player Names: One of the most frequent mistakes is entering an incorrect player username. Minecraft usernames are case-sensitive and must be spelled exactly as they appear in-game. A simple typo or incorrect capitalization will prevent the player from joining, as the server won’t find a match on its list. Always double-check the exact spelling.
- Bedrock vs. Java Confusion: It’s easy to mix up the terminology and commands between editions. Remember that Minecraft Java Edition uses “whitelist” and its corresponding commands (e.g.,
/whitelist add), while Bedrock Edition typically uses “allowlist” and its own set of commands (e.g.,allowlist add). The setup processes also differ significantly between the two. - Whitelist Not Saving Changes: If your whitelist changes aren’t being saved or applied, several factors could be at play. This might happen if the server lacks the necessary file permissions to write to the
whitelist.jsonfile, if the server is running in offline mode (which can interfere with whitelist functionality), or if a third-party plugin is conflicting with or overriding the default whitelist mechanism. - Commands Not Working: If your whitelist commands are not executing, first ensure you have the required OP privileges when trying to run them in-game. If you are using the server console, remember to omit the leading slash (
/) that is used for in-game commands. Issuing in-game commands without OP status or using the slash in the console will result in command failure. - Forgetting to Whitelist Yourself: A common oversight, especially for new server owners, is forgetting to add themselves to the whitelist. Once the whitelist is enabled, even the server owner or administrator needs to be explicitly listed to join, unless they already possess operator status, which typically grants an automatic bypass on Java Edition servers. Bedrock operators still need to be whitelisted.
- Editing the Wrong File/Directory: If you’re managing multiple Minecraft server instances, it’s crucial to ensure you are editing the correct
whitelist.jsonorserver.propertiesfile for the specific server you intend to modify. Accidentally making changes in the wrong server’s directory will lead to frustration when the expected changes don’t appear on your target server.
By understanding these mechanics, following the correct steps for your server edition, and being mindful of common pitfalls, you can successfully implement and manage a whitelist, creating a controlled and enjoyable environment for your selected players on your Minecraft server.