How to Make a Project Zomboid Server Private

This guide walks you through locking down your Project Zomboid dedicated server so only people you invite can join. You’ll set a password, restrict the player list, and configure Steam authentication so random players can’t hop in. You’ll need access to your server’s configuration files and, if you’re hosting on a rented machine, the control panel provided by your host.

What You’ll Need

• Access to your Project Zomboid server files (either on your own PC or via a hosting provider’s file manager).
• Basic text editor (Notepad, VS Code, etc.) to edit the configuration files.
• If using Steam, your Steam account must be linked to your server for the whitelist feature to work.

Step-by-Step

1. Stop your server. Before editing any files, shut down the server completely. Editing config files while the server is running can result in your changes being overwritten when it shuts down.
2. Locate your server configuration file. The main file is typically named servertest.ini (or servertest_Sandbox.lua for sandbox settings). It’s usually found in the Zomboid/Server folder within your server directory. On a rented server, use the file manager in your hosting panel to navigate there.
3. Set a password. Open the .ini file in a text editor. Find the line Password= (it might be under [Defaults]). Set it to a strong password, e.g., Password=MySecretPass123. If the line doesn’t exist, add it under the [Defaults] section. This is the password players must enter when joining.
4. Enable the whitelist. In the same file, find AllowPublicPlayers= and set it to false. This prevents unknown players from joining. Then find AllowPlayersWithPwd= and set it to true – this allows players with the password to join even if they’re not on the whitelist. If you want only whitelisted players (password optional), set AllowPlayersWithPwd=false and rely on the whitelist below.
5. Add players to the whitelist. Find the line Whitelist= in the [Defaults] section. Add Steam IDs or usernames separated by semicolons, like Whitelist=76561198012345678;76561198087654321. You can also add usernames, but Steam IDs are more reliable. To get a friend’s Steam ID, use a site like steamid.io or have them type /who in a server they own.
6. Save the file and restart your server. Once you’ve made all changes, save the .ini file. Start the server again. It will read the new settings. Test by trying to join with a non-whitelisted account – it should be denied.
7. Optional: Use a server admin panel. Many hosting providers offer a web-based control panel where you can set the password and whitelist via checkboxes and text fields. This is often easier than editing files manually. Look for a “Server Settings� or “Configuration� tab in your panel.

Common Mistakes

• Editing the wrong file. Make sure you’re editing servertest.ini and not the sandbox file. The sandbox file controls gameplay, not server access.
• Forgetting to save. After editing, save the file. If you close the editor without saving, your changes are lost.
• Whitelist with usernames. Usernames can change if a player changes their Steam name. Using Steam IDs is permanent and avoids confusion.
• Server still public. If you set AllowPublicPlayers=false but forget to set a password, the server will appear in the server list but nobody can join without being whitelisted. That’s fine, but you might want a password for convenience.

Tips

• Use a strong password. Don’t use something like “1234â€� – it will be guessed quickly.
• Keep your whitelist updated. Remove players who no longer play to keep your server secure.
• Test the whitelist. After setting it up, try joining with a second Steam account that isn’t whitelisted to confirm it’s blocked.
• Back up your config. Before making changes, copy the original .ini file so you can restore it if something goes wrong.
• Use the in-game admin commands. If you’re in-game as an admin, you can use /addwhitelist or /removewhitelist to manage the list without editing files.

Troubleshooting

Players can still join without a password. This usually means the server didn’t read your changes. Double-check that you saved the file, and that you’re editing the correct server’s config. If you have multiple servers, each has its own .ini file. Restart the server completely – not just a map reload.

Whitelisted players get “Connection refusedâ€�. This can happen if the whitelist is set incorrectly. Ensure there are no spaces between entries and that the Steam IDs are correct. Also, make sure AllowPlayersWithPwd is set to true if you want password users to bypass the whitelist, but if you want only whitelisted players, set it to false and ensure the player is on the list.

Server doesn’t start after editing. A syntax error in the .ini file can crash the server. Check for missing equals signs or extra commas in the whitelist. Compare your file with a backup to spot mistakes.

Password not working. Make sure the password is under the [Defaults] section, not under a specific world section. Also, passwords are case-sensitive.

Frequently Asked Questions

Can I make my server private without a password?

Yes, set AllowPublicPlayers=false and use only the whitelist. Players will need to be whitelisted to join, no password required.

How do I find a player’s Steam ID?

You can use a third-party site like steamid.io, or ask the player to type /who in any server they own. The ID is a 17-digit number.

Will my server still show up in the server list?

Yes, it will still appear, but players won’t be able to join unless they have the password or are whitelisted. You can also set ShowPublicServer=false to hide it entirely.

Can I change the password while the server is running?

No, you must edit the config file and restart the server. There is no in-game command to change the password.

What’s the difference between whitelist and password?

A whitelist is a list of specific Steam IDs allowed to join. A password is a shared secret that anyone with it can use to join. You can use both, or either one.

Does the whitelist work for non-Steam players?

No, the whitelist is based on Steam IDs. If you’re playing on a cracked server, you’ll need to rely on a password only.

Related

• Water Heater ROI Calculator: Estimate Payback and Savings
• Resistance Voltage Calculator: Find Voltage with Ohm’s Law
• US Water Heater Calculation: Estimate Tank Size