Set Up a Whitelist
Restrict your Valheim server to approved players only using the permitted list.
Valheim's whitelist system (called the "permitted list") restricts access to only approved players. Unlike a password which anyone can share, the whitelist locks your server to specific Steam or PlayFab IDs.
How the Whitelist Works
- When
permittedlist.txthas any entries, only listed players can join - When it's empty, anyone with the password can join
- The whitelist uses SteamID64 (PC) or PlayFab ID (crossplay)
Enable the Whitelist
Stop your server
Go to the Dashboard and stop your server.
Open the permitted list
Go to Files and navigate to:
permittedlist.txtIf the file doesn't exist, create it in the root server directory.
Add player IDs
Add one ID per line:
76561198012345678
76561198087654321
76561198011111111Find Player IDs
Steam ID (PC Players)
In-game: Press F2 while connected to the server. This shows all connected players with their SteamID64.
Online: Use steamid.io — enter the player's Steam profile URL and copy the steamID64 value.
PlayFab ID (Crossplay Players)
When crossplay is enabled, players connect via PlayFab. Their IDs are shown in the F2 player list or in the server console logs when they connect.
Remove a Player from the Whitelist
Edit the permitted list
Go to Files, open permittedlist.txt, and remove the player's ID.
Disable the Whitelist
To disable the whitelist and allow anyone to join:
Clear the permitted list
Open permittedlist.txt and delete all entries, or delete the file entirely.
Start your server
📝 Note: Even without a whitelist, players still need the server password to join if you have one set.
Whitelist vs Password
| Feature | Password | Whitelist |
|---|---|---|
| Protection | Anyone with the password can join | Only specific players can join |
| Sharing risk | Passwords can be shared easily | IDs are unique and can't be shared |
| Management | One password for all | Individual player control |
| Best for | Semi-private servers | Fully private/trusted groups |
💡 Tip: For maximum security, use both a password and a whitelist. The password prevents random connection attempts, and the whitelist ensures only approved players get in.
Related Guides
See also: Set a Password | Make Your Server Private | Adding Admins | Ban and Kick Players
If you need help, join our Discord.
How is this guide?
