# How to Set a Password on Your Stay in Tarkov Server (/docs/stay-in-tarkov/set-a-password)



import { Step, Steps } from 'fumadocs-ui/components/steps';

By default, anyone who knows your server's IP address can create an account and play on your Stay in Tarkov server. Setting a password restricts account registration so only players with the password can join. This is essential for private servers, friend groups, and community-controlled environments.

How Password Protection Works in SPT [#how-password-protection-works-in-spt]

Unlike traditional game servers where a password is entered at connection time, SPT's password system controls **account registration**. When a password is set:

* New players must enter the password when creating an account through the SPT launcher
* Existing players who already have accounts can continue to log in with their username and password without needing the server password
* The password does not affect gameplay once a player is logged in

This means you set the password once to control who can register, and existing players aren't affected by password changes.

Setting a Registration Password [#setting-a-registration-password]

<div className="fd-steps">
  <div className="fd-step">
    Open the XGamingServer panel [#1-open-the-xgamingserver-panel]

    Log in to the [XGamingServer panel](https://panel.xgamingserver.com) and stop your Stay in Tarkov server.
  </div>

  <div className="fd-step">
    Navigate to Files [#2-navigate-to-files]

    In the sidebar, go to `Files`.
  </div>

  <div className="fd-step">
    Open the core config [#3-open-the-core-config]

    Navigate to `Aki_Data/Server/configs/core.json`.
  </div>

  <div className="fd-step">
    Set the password [#4-set-the-password]

    Find the `"password"` field and set your desired password:

    ```json
    {
        "serverName": "SPT Server",
        "password": "YourSecurePassword",
        "profileSaveIntervalSeconds": 15
    }
    ```

    If the `"password"` field doesn't exist, add it to the JSON object.
  </div>

  <div className="fd-step">
    Save and restart [#5-save-and-restart]

    Click **Save** and restart your server.

    > 📝 **Note:** The password is stored in plain text in the config file. Choose something you're comfortable sharing with your group but don't reuse a password you use elsewhere.
  </div>
</div>

Connecting with a Password [#connecting-with-a-password]

When a registration password is set, new players will see an additional **Password** field in the SPT launcher's registration screen:

<div className="fd-steps">
  <div className="fd-step">
    Open the SPT Launcher [#1-open-the-spt-launcher]

    Players open `SPT.Launcher.exe` and enter your server's address (`http://YOUR_SERVER_IP:6969`).
  </div>

  <div className="fd-step">
    Register with the password [#2-register-with-the-password]

    On the registration screen, they enter their desired username, a personal account password, and the **server registration password** you set.
  </div>

  <div className="fd-step">
    Log in normally [#3-log-in-normally]

    After registration, the player logs in with just their username and personal password — the server registration password is only needed once during registration.

    > 💡 **Tip:** Make sure your players understand the difference between the two passwords: the **server registration password** is shared by you to authorize new signups, and the **personal account password** is chosen by each player to protect their own profile.
  </div>
</div>

Removing the Password [#removing-the-password]

<div className="fd-steps">
  <div className="fd-step">
    Stop your server [#1-stop-your-server]

    Stop the server from the panel.
  </div>

  <div className="fd-step">
    Clear the password [#2-clear-the-password]

    Open `Aki_Data/Server/configs/core.json` and set the password to an empty string:

    ```json
    {
        "password": ""
    }
    ```
  </div>

  <div className="fd-step">
    Save and restart [#3-save-and-restart]

    Click **Save** and restart your server.

    Registration is now open to anyone with your server's IP address.
  </div>
</div>

Managing Existing Accounts [#managing-existing-accounts]

Setting or changing the registration password does **not** affect players who already have accounts. If you want to remove a player's access entirely:

1. Stop the server
2. Navigate to `Files` → `user/profiles/`
3. Delete the player's profile file (each profile is a JSON file named with the player's profile ID)
4. Restart the server

The player will need to re-register, and if a password is set, they'll need it to create a new account.

For more details on profile management, see the [Manage Profiles](/docs/stay-in-tarkov/manage-profiles) guide.

> 💡 **Tip:** For friend groups, set a registration password and share it once with everyone who should have access. If someone you don't want gains access, change the password and delete their profile. Existing authorized players won't be affected by the password change.

If you get stuck at any time, you can join our [Discord](https://discord.xgamingserver.com/).