A whitelist restricts access to your Minecraft server to players you have approved. Only players on the list can join; everyone else is refused. This is the simplest and most effective way to keep your server private.
Enabling the whitelist
You can manage the whitelist through the server console in the game panel or with in-game commands if you have operator rights.
- Open the console in the game panel and run the command
whitelist on. - Add players with
whitelist add PlayerName. - View the current list with
whitelist list.
The whitelist takes effect immediately. Players who are already online are not kicked, but new players who are not on the list can no longer connect.
Removing players
To remove someone from the whitelist, use whitelist remove PlayerName. The player is not kicked automatically, but will not be able to rejoin after leaving the server.
The whitelist file
The whitelist is stored in the file whitelist.json in the root folder of the server. It contains the username and UUID of every approved player. You can also edit the file manually through the Files tab in the game panel. Save the file and then run whitelist reload in the console to apply the changes.
Whitelist via server.properties
You can also enable the whitelist by setting white-list=true in server.properties. After saving, restart the server. The console command whitelist on does the same thing without requiring a restart.
Tips for whitelist management
- Always use a whitelist if your server is meant for a fixed group of friends. It prevents strangers from joining and causing damage.
- Combine the whitelist with a permissions plugin such as LuckPerms for fine-grained control over what players can do.
- On larger servers, you can automate whitelist management with a plugin that lets players apply through Discord or a website.
Looking for a Minecraft server with full control over who can play? Check out our Minecraft hosting plans.
Can I temporarily disable the whitelist?
Yes. Run whitelist off in the console. The list is preserved, but anyone can connect until you re-enable the whitelist.
Does the whitelist work with Bedrock players via Geyser?
Yes, but Bedrock players connecting through Geyser and Floodgate have a different username format. Their name starts with a dot by default. Add them using that format, for example whitelist add .BedrockPlayer.
What happens if I accidentally remove myself from the whitelist?
If you have operator rights and are still online, you can add yourself back immediately. If you have already logged out, edit whitelist.json through the Files tab in the game panel and add your name back manually.