Set Up a Whitelist on Your Valheim Server

Restrict your Valheim dedicated server to approved players only using the permittedlist.txt allowlist.

Valheim's whitelist (called the permitted list) restricts access to specific players. Unlike a password — which anyone with the password can use — the whitelist locks the server to specific Steam or PlayFab IDs.

How the Whitelist Works

StateWho Can Join
permittedlist.txt has entriesOnly listed players can join
permittedlist.txt is empty / missingAnyone with the password can join

The whitelist accepts SteamID64 (Steam players) or PlayFab ID (crossplay players).

Enable the Whitelist

Stop your server

In the XGamingServer Panel, go to Console and stop the server.

Open permittedlist.txt

Click Files in the sidebar and open permittedlist.txt in the server root. If it doesn't exist, create it.

Add player IDs

One ID per line:

76561198012345678
76561198087654321
76561198011111111

Start the server

Click Save Content and start from Console.

Find a Player's ID

Player TypeHow to Find
Steam (PC)Press F2 in-game while connected — shows all players' SteamID64. Or look up their profile at steamid.io
Crossplay (Xbox/Game Pass)Press F2 in-game to see PlayFab IDs, or check Console for connection logs

Remove a Player

Edit permittedlist.txt, delete the player's line, save, and restart the server.

Disable the Whitelist

To allow any player (with the password) to join again, either delete permittedlist.txt entirely or remove all entries from it.

Whitelist vs Password

FeaturePasswordWhitelist
ProtectionAnyone with the password can joinOnly specific players can join
Sharing riskPasswords leak easilyIDs are unique to each player
ManagementOne password for everyonePer-player control
Best forSemi-private friend groupsFully private / trusted communities

Tip: For maximum security, use both a password and a whitelist. The password prevents random connection attempts and the whitelist ensures only approved players get in.

How is this guide?

40% Off — Limited TimeGet your Valheim server todayInstant setup, DDoS protection, and 24/7 support included.
Get a Server

On this page