A whitelist restricts which players can join a Minecraft Java server. It is separate from operator access: a player can be allowed to join without receiving administrative commands. Configure it from the trusted server console so you do not need to grant extra in-game permissions.
Add the intended players
whitelist add PlayerName
whitelist on
whitelist listThese are Java server console commands; replace PlayerName with the intended account name. A panel console normally takes commands without a leading slash. Check each command’s response and the resulting list instead of assuming a pasted command succeeded.
The white-list setting controls the whitelist, while enforce-whitelist governs enforcement behavior for players no longer allowed. Consult the settings for your server version and plan any change that may disconnect players.
Use an ordinary player account
- Confirm an intended account appears in the list.
- Join with that account without relying on operator privileges.
- Check that an unlisted test account is rejected.
- Restart normally and verify the list remains in effect.
- Remove temporary test entries when finished.
| Symptom | Check |
|---|---|
| A listed player is rejected | Exact account identity, authentication and proxy setup |
| Everyone can join | Whitelist state and the server actually receiving connections |
| Only Bedrock users fail | Geyser/Floodgate identity mapping and supported whitelist procedure |
| Settings revert | Panel-generated configuration or a plugin overriding behavior |
Keep access changes intentional
Review the list when a community changes and keep administrator rights limited. A whitelist is not a substitute for account authentication or plugin security. Do not disable online authentication to work around an identity mismatch; diagnose the configured proxy or cross-play setup.
Review Minecraft security and the Geyser and Floodgate guide if your community includes Bedrock players.
Sources and references
Hosting documentation. Publication and update dates reflect this edition.
Related articles
- Minecraft Server Security: Accounts, Plugins and RecoveryProtect authentication and privileged access, reduce unnecessary listeners and keep recovery copies outside the server.3 min read
- Using the server consoleRead startup output, run commands and interpret common warnings.1 min read
- How to Set Up Geyser and Floodgate for Java and Bedrock PlayersPlan authentication and a separate UDP listener, then test cross-edition joins on a supported Java server.3 min read
