How to whitelist a Minecraft server (Java and Bedrock)

Lock your Minecraft server to a list of approved usernames from the dashboard or the console. Works on Paper, Forge, Fabric, and Bedrock.

A whitelist locks a Minecraft server so only the players you have explicitly added can join. On Hostd, you can manage it from the dashboard or the console; both feed the same whitelist.json file under the hood.

From the dashboard

Open Dashboard → your server → Players. Toggle Whitelist enabled at the top. Add players by username; we resolve to UUID automatically so a player can change their Minecraft name later without losing access. Remove with the × next to a row.

From the in-game or web console

The vanilla commands all work:

/whitelist on
/whitelist add SomePlayer
/whitelist remove SomePlayer
/whitelist list
/whitelist off

Run them from the dashboard's Console panel or from in-game if you are opped. The dashboard Players tab updates within a few seconds because we re-read the file on every change.

Common gotchas

• Premium versus offline accounts. A whitelisted UUID is the premium (Mojang) UUID. If a player is on a cracked client, their UUID will be different and they will not match the whitelist entry even with the same username.
• Bedrock uses allowlist.json, not whitelist.json. Same idea, different file and command (/allowlist add). The dashboard Players tab handles both transparently.
• Whitelist persists across world resets. If you wipe the world to start fresh but keep whitelist.json, your old players still have access. Take it into account.

Why whitelisting matters even with a private address

A private subdomain is not actually private; anyone with the address can attempt to join. If you have shared your address in a Discord server, on a forum, or with a player who has since left the group, the whitelist is your only line. Turn it on early.

Where to go next

• Inviting friends for the workflow when you have a stable group.
• Op yourself on a Minecraft server if you also need admin commands.

Last updated 2026-05-23. Notice a mistake? Tell us.