How to Set Up a Minecraft Server Whitelist

Wanna keep random people off your Minecraft server? Whitelist is the answer.

Super simple to set up. Takes like 2 minutes. Here's exactly how to do it.

What is a Whitelist?

Whitelist = only specific players can join your server.

Without whitelist:

• Anyone with your IP can join
• Griefers can destroy stuff
• Trolls can spam chat
• Your server gets chaotic

With whitelist:

• Only approved players can join
• Friends only
• No random people
• Your builds stay safe

Think of it like a guest list for a party.

Why You Need a Whitelist

Protection from:

• Griefers (people who destroy builds)
• Hackers and cheaters
• Spam bots
• Trolls

Benefits:

• Safe community
• Known players only
• Easy to manage
• No surprise guests

For private servers with friends, whitelist is ESSENTIAL.

How to Enable Whitelist

Method 1: In-Game Commands (Easiest)

If you're already in the server:

Step 1: Op yourself (if not already)

op YourUsername

Step 2: Turn on whitelist

/whitelist on

Done. Whitelist is now active.

Method 2: Server Console

If using control panel:

1. Go to your server console
2. Type: whitelist on
3. Press enter

Whitelist enabled.

Method 3: server.properties File

Edit your server files:

1. Open server.properties
2. Find: white-list=false
3. Change to: white-list=true
4. Save file
5. Restart server

Whitelist is now on.

Adding Players to Whitelist

Once whitelist is enabled, add players:

Add Single Player

/whitelist add PlayerUsername

Replace "PlayerUsername" with their exact Minecraft name.

Example:

/whitelist add Steve123

Add Multiple Players

Do it one at a time:

/whitelist add Player1
/whitelist add Player2
/whitelist add Player3

No batch command, just repeat for each friend.

Removing Players from Whitelist

Changed your mind? Remove someone:

/whitelist remove PlayerUsername

They can no longer join (kicks them if online).

Example:

/whitelist remove Griefer42

Other Whitelist Commands

Check Whitelist Status

/whitelist list

Shows all whitelisted players.

Reload Whitelist

If you edited whitelist.json manually:

/whitelist reload

Applies changes without restarting.

Turn Off Whitelist

/whitelist off

Anyone can join again (not recommended for private servers).

Managing the whitelist.json File

Whitelist data is stored in whitelist.json.

Where to Find It

In your server folder:

/your-server/whitelist.json

What It Looks Like

[
  {
    "uuid": "069a79f4-44e9-4726-a5be-fca90e38aaf5",
    "name": "Steve123"
  },
  {
    "uuid": "853c80ef-3c37-49fd-aa49-938b674adae9",
    "name": "Alex456"
  }
]

Editing Manually

You CAN edit this file but:

• ❌ Easy to make mistakes
• ❌ Need exact UUID (pain to find)
• ✅ Better to use commands

Only edit if you know what you're doing.

Whitelist with Control Panels

Most hosting panels have whitelist management:

Common Panel Features

• Toggle whitelist on/off
• Add/remove players
• See whitelist
• No console commands needed

Example (most panels):

1. Go to "Settings" or "Configuration"
2. Find "Whitelist" section
3. Enable/disable
4. Add usernames
5. Save

Check your specific panel's documentation.

Troubleshooting Common Issues

"Player can't join even though whitelisted"

Causes:

• Typo in username (case-sensitive)
• Player changed their username
• Whitelist didn't reload

Fix:

/whitelist remove OldName
/whitelist add CorrectName
/whitelist reload

"You are not whitelisted on this server"

Player sees this message = not on whitelist.

Fix:

• Check their EXACT username (case matters)
• Add them: /whitelist add TheirName
• Tell them to try again

"Whitelist on but anyone can join"

Whitelist isn't actually enabled.

Fix:

• Run /whitelist on
• Check server.properties: white-list=true
• Restart server

"Added player but they still can't join"

Possible issues:

• Server needs reload/restart
• Wrong username
• They're banned (check ban list)

Fix:

/whitelist reload

Or restart server.

Whitelist Best Practices

Only Whitelist People You Trust

Don't add:

• Random people from forums
• "Friends of friends" you don't know
• People who beg in YouTube comments

Whitelist = trust. Be selective.

Keep List Updated

Remove players who:

• Don't play anymore
• Caused problems
• You don't talk to anymore

Clean whitelist = better security.

Backup Your Whitelist

Copy whitelist.json somewhere safe:

• If server crashes, you have the list
• Can restore quickly
• Saves time re-adding everyone

Use Whitelist + Other Protection

Whitelist doesn't prevent EVERYTHING.

Also use:

• Anti-grief plugins (CoreProtect)
• Backup system (restore if needed)
• Operator permissions (limit who has admin)

Whitelist vs Other Methods

Whitelist vs Password

Some servers use passwords instead:

Password:

• One password everyone knows
• Can be shared easily (security risk)
• Anyone with password can join

Whitelist:

• Individual approval needed
• Can't be "shared"
• More secure

Whitelist is better for most servers.

Whitelist vs Bedrock Allowlist

Bedrock Edition calls it "Allowlist":

Commands are different:

/allowlist on
/allowlist add PlayerName

But same concept.

Setting Up Whitelist on Different Server Types

For Vanilla Server

1. Enable whitelist: /whitelist on
2. Add friends: /whitelist add Name
3. Done

For Spigot/Paper Server

Same commands as vanilla:

/whitelist on
/whitelist add PlayerName

For Modded (Forge/Fabric) Server

Same process:

• Commands work the same
• File location same
• No difference

For Bedrock Server

Different commands:

/allowlist on
/allowlist add PlayerName

Note: "allowlist" not "whitelist"

Whitelist + Discord Integration

Advanced setup: Connect whitelist to Discord.

With plugins (Spigot/Paper):

• DiscordSRV
• WhitelistSync
• Players apply via Discord
• Auto-add to whitelist

Good for larger communities.

When NOT to Use Whitelist

Whitelist isn't for every server:

Don't use if:

• Public server (want anyone to join)
• Anarchy server (chaos is the point)
• Minigame server (need players)
• Large community (too many to manage)

Do use if:

• Private friend server
• Small community
• Building projects
• Roleplay server
• Any server where you want control

Whitelist Workflow for New Players

Good process for managing new additions:

1. Player requests to join (DM, Discord, etc)
2. You verify they're trusted (friend, know them)
3. Add to whitelist: /whitelist add TheirName
4. Give them server IP
5. They join and play

Simple system, works well.

Emergency: Disable Whitelist Quickly

Server down and you can't access console?

Via FTP:

1. Connect to server files
2. Open server.properties
3. Change white-list=true to white-list=false
4. Save
5. Restart server

Whitelist disabled, anyone can join.

Whitelist for Different Server Sizes

2-5 Friends

Easy to manage:

• Just add your friends
• Rarely update
• Low maintenance

10-20 Players

Needs organization:

• Keep list somewhere (Excel, Discord)
• Regular updates
• Remove inactive players

20+ Players

Consider alternatives:

• Application system
• Discord integration
• Multiple admins to manage

Whitelist gets tedious at this scale.

Combining Whitelist with Permissions

Whitelist + permission plugins = better control.

Example setup:

• Whitelist: Controls who can join
• LuckPerms: Controls what they can do
• CoreProtect: Logs everything

Layers of security.

Quick Command Reference

/whitelist on           - Enable whitelist
/whitelist off          - Disable whitelist
/whitelist add Name     - Add player
/whitelist remove Name  - Remove player
/whitelist list         - Show all whitelisted
/whitelist reload       - Reload from file

Save these somewhere for quick reference.

Whitelist on Different Hosting

With Space-Node

1. Access control panel or SSH
2. Use console or edit files
3. Full control over whitelist

Or use their support for help setting up.

With Other Hosts

Most provide:

• Console access (use commands)
• File manager (edit whitelist.json)
• Panel features (GUI management)

Process is similar everywhere.

Final Thoughts

Whitelist is the EASIEST way to protect your private server.

Setup takes 2 minutes:

1. /whitelist on
2. /whitelist add FriendName
3. Done

Your server is now protected from randoms.

For friend servers, ALWAYS use whitelist. The one time you don't is when someone griefs your base.

Not worth the risk. Just enable it.

Check out Space-Node's Minecraft hosting for servers with easy whitelist management.

Or their VPS plans if you want full control over server configuration.

Protect your server. Enable whitelist. Thank me later.