How to Set a Password on Your Stay in Tarkov Server
Learn how to restrict account registration on your Stay in Tarkov (SPT/Fika) server with a password.
By default, anyone who knows your server's IP address can create an account and play on your Stay in Tarkov server. Setting a password restricts account registration so only players with the password can join. This is essential for private servers, friend groups, and community-controlled environments.
How Password Protection Works in SPT
Unlike traditional game servers where a password is entered at connection time, SPT's password system controls account registration. When a password is set:
- New players must enter the password when creating an account through the SPT launcher
- Existing players who already have accounts can continue to log in with their username and password without needing the server password
- The password does not affect gameplay once a player is logged in
This means you set the password once to control who can register, and existing players aren't affected by password changes.
Setting a Registration Password
Open the XGamingServer panel
Log in to the XGamingServer panel and stop your Stay in Tarkov server.
Navigate to Files
In the sidebar, go to Files.
Open the core config
Navigate to Aki_Data/Server/configs/core.json.
Set the password
Find the "password" field and set your desired password:
{
"serverName": "SPT Server",
"password": "YourSecurePassword",
"profileSaveIntervalSeconds": 15
}If the "password" field doesn't exist, add it to the JSON object.
Save and restart
Click Save and restart your server.
📝 Note: The password is stored in plain text in the config file. Choose something you're comfortable sharing with your group but don't reuse a password you use elsewhere.
Connecting with a Password
When a registration password is set, new players will see an additional Password field in the SPT launcher's registration screen:
Open the SPT Launcher
Players open SPT.Launcher.exe and enter your server's address (http://YOUR_SERVER_IP:6969).
Register with the password
On the registration screen, they enter their desired username, a personal account password, and the server registration password you set.
Log in normally
After registration, the player logs in with just their username and personal password — the server registration password is only needed once during registration.
💡 Tip: Make sure your players understand the difference between the two passwords: the server registration password is shared by you to authorize new signups, and the personal account password is chosen by each player to protect their own profile.
Removing the Password
Stop your server
Stop the server from the panel.
Clear the password
Open Aki_Data/Server/configs/core.json and set the password to an empty string:
{
"password": ""
}Save and restart
Click Save and restart your server.
Registration is now open to anyone with your server's IP address.
Managing Existing Accounts
Setting or changing the registration password does not affect players who already have accounts. If you want to remove a player's access entirely:
- Stop the server
- Navigate to
Files→user/profiles/ - Delete the player's profile file (each profile is a JSON file named with the player's profile ID)
- Restart the server
The player will need to re-register, and if a password is set, they'll need it to create a new account.
For more details on profile management, see the Manage Profiles guide.
💡 Tip: For friend groups, set a registration password and share it once with everyone who should have access. If someone you don't want gains access, change the password and delete their profile. Existing authorized players won't be affected by the password change.
If you get stuck at any time, you can join our Discord.
How is this guide?
How to Manage Profiles on Your Stay in Tarkov Server
Learn how to view, edit, back up, and delete player profiles on your Stay in Tarkov (SPT/Fika) server.
Stormworks: Build and Rescue Server Guides
Comprehensive guides to set up, manage, and optimize your Stormworks: Build and Rescue dedicated server.