iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Godlike.Host offers hosted Minecraft Java servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
To configure RCON on a Minecraft Java Edition server, stop the server, edit server.properties, set enable-rcon=true, enter a long non-blank password, choose a free TCP port (25575 is the documented default), save the file, and restart. RCON then lets an external client, script, or remote shell send server commands.
RCON provides administrative control, so treat it as a security-sensitive service rather than simply another Minecraft setting. The protocol is unencrypted; exposing its port to the public internet can allow interception or unauthorized access. Restrict the port with a firewall and trusted-IP allow-list, and use a hosting panel’s built-in console instead when it already meets your needs.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsWhat RCON does
RCON means Remote CONsole. In Minecraft Java Edition, it is the network interface for sending console commands from outside the game process. An administrator can use a compatible RCON client, automation script, or remote shell instead of opening the server terminal directly. Commands are executed with server-level authority, so an authenticated RCON connection can affect worlds, players, permissions, and server operation.
RCON is configured in the server’s server.properties file. It is disabled by default. Four properties are relevant:
#1 Best Overall
- Now Minecraft lovers can play a special version of UNO!
- Same as Basic UNO but features Minecraft characters and includes special Creeper rule card. Draw this card and the other players have to draw three more cards from the pile!
- The goal is to get rid of all the cards in your hand.
- First player or team to 500 wins.
- When you're down to one card, don't forget to yell "UNO"!
enable-rconturns the service on or off.rcon.passwordsupplies the password required by an RCON client.rcon.portselects the TCP port on which RCON listens.broadcast-rcon-to-opscontrols whether RCON activity is broadcast to operators in game.
This guide covers Minecraft Java Edition. The supplied evidence does not establish an equivalent procedure, setting names, or behavior for Bedrock Edition, so do not assume these instructions apply there.
Prepare before changing the file
Confirm where the server files live
On a self-managed server, server.properties is normally in the same server directory as the server’s launch files and world folders. On managed hosting, use the provider’s file manager or configuration editor. The labels and file layout differ between panels, but the property names remain the same for Java servers.
Recommended Free Tools
Stop the server first
Shut the server down cleanly before editing. If the process is still running, it can rewrite configuration during shutdown and overwrite your changes. A stopped process also makes it easier to identify whether a later connection failure is caused by configuration or by the network.
Keep a rollback copy
Make a copy of the existing server.properties file before editing. Preserve the original values, including any settings unrelated to RCON. If the server fails to start or another setting is accidentally changed, restore the copy and restart.
Set the RCON properties
Open the file in a plain-text editor or your host’s configuration editor. Each setting uses the form name=value with no surrounding quotation marks. Add a missing property or change its existing value; do not create duplicate lines for the same key.
1. Enable RCON
Set:
enable-rcon=trueRCON is off by default, so leaving this value as false or omitting it prevents the service from listening. Use lowercase true, matching the standard property format.
Rank #2
- The classic UNO card game builds fun on game night with a Minecraft theme.
- UNO Minecraft features a deck and storage tin decorated with graphics from the popular video game.
- Players match colors and numbers to the card on top of the discard pile as in the classic game.
- The Creeper card unique to this deck forces other players to draw 3 cards.
- Makes a great gift for kid, teen, adult and family game nights with 2 to 10 players ages 7 years and older, especially Minecraft and video game fans.
2. Create a strong, non-blank password
Set rcon.password to a long, randomly generated value that is used nowhere else:
rcon.password=use-a-long-random-stringThe example is only a layout example; replace it with your own random secret. Do not leave the value empty. If RCON is enabled with a blank password, the RCON service will not start. Do not put the password in chat, a public issue, a screenshot, or a script repository. Store it in the password manager or secret store used by the people and automation that must connect.
A password alone is not a substitute for network controls. RCON has no encryption, so a secret sent across an untrusted network can still be exposed. Use a unique value and limit which systems can reach the port.
3. Choose the RCON port
Set a free TCP port with rcon.port:
rcon.port=25575The Minecraft Wiki documents 25575 as the default RCON port. You may choose another unused TCP port when that avoids a conflict with another service or matches your firewall policy. The documented valid range is 1–65535, although another published result lists 1–65534; the precise upper bound is therefore not settled here. In practice, choose an available, non-privileged port well away from ports already used by the operating system, your Minecraft game connection, a web panel, or another daemon.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →The RCON port is separate from the port players use to join the Minecraft server. Changing one does not change the other. Record the selected port alongside the password so that the administrator or automation client knows where to connect.
4. Decide whether to broadcast RCON activity to operators
The optional setting is:
broadcast-rcon-to-ops=falseWith the example value, commands issued through RCON are not broadcast to in-game operators. This can reduce chat noise and avoid exposing administrative activity to every online operator. A source result reports true as the default, while the Minecraft Wiki example uses false; because those references disagree, set the value explicitly rather than relying on a version’s implicit default. This option changes visibility, not the authority of the RCON connection.
Rank #3
- UNO Video Game Cards Set - Bundle with Minecraft, Super Mario, Teenage Mutant Ninja Turtles UNO Cards for Kids Plus Stickers, More | Minecraft, Mario, TMNT Activities for Kids, Family Game Night.
- This video game card game set comes with three deck of UNO cards featuring unique artwork from Mario Kart, Minecraft, and Teenage Mutant Ninja Turtles.
- Sure to be a hit with all video game fans, this collectible UNO card deck 3 pack is perfect to give your video game fan. Each UNO deck includes slightly different rules for endless fun!
- Play at your next family game night, these Super Mario, Minecraft, and TMTN editions of UNO each provide a new, fun twist on the classic card game. Great for the whole family.
- Officially licensed Minecraft, Mario Kart, and Teenage Mutant Ninja Turtles UNO card game set for kids and adults alike.
Complete example
A minimal Java Edition block can look like this:
enable-rcon=true
rcon.password=replace-with-your-random-secret
rcon.port=25575
broadcast-rcon-to-ops=falseKeep the existing line endings and file encoding used by the server. Do not add spaces around the equals signs, and check that the password contains no accidental trailing spaces from copying and pasting.
Save and restart
Save the file, close the editor, and start the server again. The settings take effect only after a restart; changing the file while the process is running does not reliably reload RCON. Wait for the server to finish starting before testing. If your hosting panel has separate Save, Restart, and Start controls, use Save first and then perform a full restart rather than merely reopening a console tab.
After startup, verify that the process remains online and that no other service is already occupying the selected port. Keep the exact port and password available to the RCON client, but do not place either in a publicly accessible configuration file.
Protect the RCON network path
Why public exposure is dangerous
The Minecraft Wiki warns that exposing an RCON port to the internet is dangerous. RCON is not encrypted and can be subject to man-in-the-middle attacks. Because a successful connection has server-console authority, a stolen password or intercepted session can be far more damaging than an ordinary player account compromise.
Use a firewall and an allow-list
Permit inbound TCP traffic to the chosen RCON port only from the fixed IP addresses or private network ranges that actually need it. Deny other sources by default. If the administrator connects through a changing residential address, use a controlled private network or a secure administrative path rather than opening the port to every address. Recheck the rule whenever the port or the automation host changes.
Apply the restriction at every relevant layer: the host operating-system firewall, any cloud security group, and the router or hosting control panel that filters inbound traffic. Opening the port in one layer does not guarantee that another layer permits it, and closing it in only one layer may not protect a different public interface.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- The cooperative Minecraft card game invites 2-4 players aged 8 and up to explore the picturesque landscapes of Minecraft and search for hidden treasures
- Experience Minecraft as a new, exciting adventure and fill your chests with treasures before you are caught by the monsters
- Only if you work well as a team and combine luck with strategy can you win the game together.
- The card game for 2-4 people is entertaining and varied, lots of fun and perfect for taking with you thanks to its practical travel format.
- The card game is perfect for every family or friends game night and a great gift for all small and big fans of Minecraft.
Prefer an existing hosting console when appropriate
Many managed hosts provide a browser console or an RCON option in their control panel. Check that interface before exposing a new public port. A panel console may keep the administrative connection inside the provider’s management network and can require less setup. It may not, however, provide the programmatic access needed by scheduled scripts. If a panel already exposes RCON, confirm which port, address, and authentication method it expects instead of creating a second path without a reason.
Connect with an RCON client
RCON is a protocol, not a built-in desktop application. Use a client that supports Minecraft’s RCON implementation, or a script/library designed for it. The client normally needs three values:
- The server address or hostname reachable from the client.
- The TCP port configured in
rcon.port. - The exact value of
rcon.password.
Enter those values in the client’s connection fields or its documented configuration format. Keep the connection pointed at the RCON port, not the player-facing Minecraft port. A client that reaches the game port will not authenticate as RCON even when the server is healthy.
Perform a low-risk test
Once authenticated, use a harmless read-only or informational command supported by your client and server to confirm that the connection works. Check the returned response and the server log. Avoid beginning with a command that changes the world, modifies permissions, kicks players, or stops the server. When automation is involved, test manually first, then run the script against a non-production instance or during a maintenance window.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Separate human and automation access
RCON itself uses the configured password as the shared credential. If several people or scripts use it, document who is responsible for rotating it and where it is stored. Give scripts only the network access they need, keep their secrets out of source control, and review scheduled jobs for commands that could be destructive. Because the RCON account represents the console, there is no safety boundary between a trusted administrator and an accidentally over-privileged script.
Troubleshoot common failures
| Symptom | Likely cause | What to check |
|---|---|---|
| The client reports connection refused | RCON is disabled, the server has not restarted, or nothing is listening on the selected port. | Confirm enable-rcon=true, perform a full restart, and verify that the configured port is free and permitted by the local firewall. |
| The client times out | A firewall, security group, router rule, or allow-list is dropping traffic, or the address is not reachable from the client. | Check every network-filtering layer and allow the client’s source IP to the configured TCP port. Make sure the client is using the server’s reachable address rather than a private address visible only inside the host’s network. |
| Authentication fails even though the password looks right | The file contains a blank value, an accidental space, a stale password, or the server was not restarted after the edit. | Stop the server, re-enter the password carefully, save, restart, and update the client secret. Treat the password as case-sensitive unless your client documentation says otherwise. |
| RCON works on one machine but not another | The firewall allow-list or routing permits only the first source address. | Compare the source IPs and network paths. Add only the second trusted address instead of opening the port globally. |
| The server starts but RCON remains unavailable | The selected port is already used, the value is outside the accepted range, or the property was duplicated or mistyped. | Check the server startup log, remove duplicate keys, verify the spelling of all four properties, and choose another free TCP port. The documented range is 1–65535, with one published result listing 1–65534, so avoid relying on the disputed upper endpoint. |
| Operators see unexpected command messages | broadcast-rcon-to-ops is enabled or its implicit default differs from what you expected. |
Set the property explicitly to true or false, restart, and tell operators which behavior to expect. |
| Changes disappear after shutdown | The file was edited while the server was running and the shutdown process rewrote it. | Stop the server before editing, restore the intended values, save, and then restart. |
RCON versus a hosting-panel console
Choose the administrative path based on who must connect and how much automation you need. The following comparison describes the trade-offs without assuming a particular hosting provider.
Best Value
- STANDARD DECK: This deck of Minecraft cards features the iconic characters from the series on the faces of each card and a protective, giftable storage tin that any Minecrafter or card player will love
- COLLECTIBLE TIN: The cards come in a decorative storage tin in the design of the classic Minecraft icon, making them perfect for fans or gamers. Add some retro fun to your next poker night
- TRAVEL GAMES: Whether you like go fish, gin rummy, blackjack, poker, old maid or solitaire, this deck is perfect to bring along in the car or your purse so you are always ready to play
- NOVEL AND ORIGINAL: For those in the fandom looking for novelty items and all things geek, crazy, and unique, Paladone is your best source for top selling toys, mugs, collectibles, and novelties
- OFFICIALLY LICENSED: This quality collectable is a unique addition to any fan's set. Give this cool collector's merchandise to mums, dads, fans, grads, kids, guys, and gals who love pop culture fun
| Factor | Hosting-panel console | Self-managed RCON |
|---|---|---|
| Security surface | The provider controls the management interface; you may not need to expose a game-server port. | You control the listening port and firewall, but an exposed, unencrypted endpoint becomes your responsibility. |
| Setup effort | Often available through an existing panel login with little or no file editing. | Requires editing server.properties, selecting a port, restarting, configuring firewall rules, and setting up a client. |
| Provider support | Availability, permissions, logs, and retention depend on the host’s panel. | Works wherever the Java server can listen on a reachable TCP port, subject to your network controls. |
| Programmatic access | May not expose an API or stable automation interface. | Designed for external clients and scripts, making scheduled or event-driven commands practical. |
| Failure diagnosis | Panel status and provider logs may hide some network details. | You can inspect the server configuration and your own firewall, but must diagnose all layers yourself. |
If a person only needs occasional administration, a well-protected panel console can reduce exposure. If a trusted automation system must issue commands, RCON may be the appropriate interface, provided its port is tightly restricted.
Operational checklist
- Use Minecraft Java Edition and locate the correct server instance before editing.
- Stop the server and make a backup of
server.properties. - Set
enable-rcon=true. - Set a long, random, non-blank
rcon.password. - Choose a free TCP port; 25575 is the documented default.
- Set
broadcast-rcon-to-opsexplicitly so its visibility behavior is intentional. - Save the file without duplicate keys or accidental whitespace in the password.
- Restart the server and wait for normal startup.
- Allow the RCON port only from trusted administrator or automation IP addresses.
- Connect with the RCON port, not the player-facing Minecraft port.
- Test with a harmless command before running destructive or automated actions.
- Keep the password out of public files, chat, screenshots, and source repositories.
- Rotate the password and update every client when an authorized user, host, or script no longer needs access.
Version and platform caveats
Property names, defaults, and accepted port behavior can change with Minecraft releases. The values described here reflect the available Java Edition references at the time of writing. Recheck the current Minecraft Wiki documentation and your server version before a major deployment or upgrade, especially if you depend on an implicit default.
The documented default port is 25575, but a custom free port is valid within the accepted range. The conflicting upper-bound reports mean that choosing an ordinary, available port avoids the only practical ambiguity. Bedrock Edition is not covered because equivalent RCON configuration behavior was not established by the available material.
Safe remote administration in practice
A sound deployment keeps RCON private wherever possible: run the client from a trusted administration network, restrict the firewall to that network, and avoid publishing the endpoint in DNS or documentation intended for players. If remote work requires access from outside that network, use a controlled private connection and preserve the same allow-list principle. Never treat an obscure port number as protection; scanners can discover it, and the protocol still lacks encryption.
Document the four property values, the firewall rule, the trusted source addresses, and the person responsible for the credential. When troubleshooting, change one variable at a time: first confirm the file and restart, then confirm local listening, then check filtering and routing, and finally verify the client credentials. This sequence prevents a network symptom from being mistaken for a password problem and gives you a clear rollback path.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →
