Free tools Windows power users keep installed
One-click scans. No signup required.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Prefer not to run the server on your own PC? Godlike.Host offers hosted Hytale servers with free DDoS protection and up to three free backups a day.
Start with Hytale’s built-in Online Play Network Report on the computer hosting the world. It identifies whether Windows Firewall, antivirus filtering, a router that is not forwarding the required port, double NAT, or carrier-grade NAT (CGNAT) is preventing friends from joining. Then work through the least-invasive fixes in this order: allow Hytale on both Windows network profiles, check antivirus filtering, forward the exact UDP port named by the report, test from a phone hotspot, and investigate double NAT or CGNAT if the problem remains.
A Windows firewall exception and a router port-forwarding rule are different controls. You may need both. Hytale’s dedicated server uses QUIC over UDP, not TCP; its documented default is UDP port 5520. A dedicated server also requires at least 4 GB of memory and Java 25 according to Hypixel Studios’ 2026 server manual.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →What the Hytale firewall error actually means
The message usually describes a failed connection path rather than a single broken setting. Hytale can be blocked on the host computer, filtered by security software, denied by the local router, stopped by a second router, or made unreachable by an ISP that uses CGNAT. A school, office, hotel, or public Wi-Fi network can also block the traffic upstream, where you cannot change the policy from Hytale.
If you are hosting a normal shared world, use the Network Report before changing router settings. Open Hytale’s Online Play screen and select Copy Network Report. Hypixel Studios describes that button as copying a diagnostic report. Paste the report into a text file so you can refer to the named cause and port while you work.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Quick interpretation of common report results
| Report or symptom | Most likely action |
|---|---|
| Windows Firewall or local firewall is blocking Hytale | Allow Hytale through Windows Firewall on the Private and Public profiles; check antivirus network filtering. |
| The router does not forward the port | Forward the exact UDP port named by Online Play to the host computer’s local IP address. |
| Two routers are present | Forward on both routers, or connect the host to the main router and remove the extra routing layer. |
| CGNAT is detected | Ordinary inbound port forwarding will not work. Use an overlay such as Tailscale or ask the ISP for a public IP. |
| Joining works on a phone hotspot but not at home, school, work, or public Wi-Fi | The original network is filtering or blocking Hytale traffic. Test another permitted network or contact its administrator. |
Prepare the host before troubleshooting
- Identify the computer that is hosting the Hytale world. The firewall and router changes must point to that machine, not to a friend’s joining computer.
- Record the host’s current local IPv4 address. On Windows, open Settings > Network & internet > Wi-Fi or Ethernet, select the connected network, and note the IPv4 address. The address commonly changes after a reboot or DHCP lease renewal, so reserve it in the router’s DHCP settings if that option is available.
- Copy the Online Play Network Report and note the port it names. Do not assume that every Online Play session uses the dedicated-server default of 5520; the report is the authority for the host’s current session.
- Make sure you can sign in to the router’s administrator page. If the connection belongs to a school, office, landlord, or managed apartment network, you may not have the authority to change forwarding or firewall rules.
- Temporarily record your existing router rules before editing them. Avoid deleting unrelated entries or changing the router’s WAN, DNS, or security settings while diagnosing Hytale.
Allow Hytale through Windows Firewall
Do this on the computer that hosts the world. Windows can permit an application on one network profile while blocking it on another. If you move between a home network marked Private and a hotspot or public network marked Public, a rule that covers only one profile can look like an intermittent Hytale failure.
Use the built-in allowed-app screen
- Press the Windows key and search for Windows Defender Firewall.
- Open it, then select Allow an app or feature through Windows Defender Firewall.
- Select Change settings. Approve the administrator prompt if Windows asks.
- Find Hytale or its launcher in the list. Enable both Private and Public for the Hytale entries that are present.
- If Hytale is not listed, select Allow another app, browse to the installed Hytale executable, add it, and then enable the appropriate profiles.
- Save with OK, restart Hytale, and have the friend try the join again.
Allowing an application is not the same as opening a router port. This step permits traffic through the host computer’s local firewall; it does not make the host reachable from the internet.
When the normal app entry does not work
Some installations expose more than one executable, such as a launcher and a game process. If the report still identifies a local firewall block after you allowed the visible entry, add the Hytale executable that actually runs the world-hosting session, then retry. Do not broadly disable Windows Firewall as a permanent solution. If you disable it briefly to confirm the diagnosis, re-enable it immediately after the test and create a narrow allow rule instead.
Check antivirus and other endpoint filtering
Third-party antivirus and endpoint-security products can filter network traffic even when Windows Firewall shows Hytale as allowed. Use the security product’s application or network-exception screen to add Hytale, rather than turning off all protection. If you need a diagnostic test, temporarily disable only its network filtering, retry one join, and turn it back on immediately afterward.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
- If the join works only while filtering is disabled, leave the antivirus enabled and create an exception for Hytale and its server process.
- If the join fails with filtering disabled, restore the protection and continue to router and NAT checks.
- Do not install a second firewall or “network optimizer” while troubleshooting; multiple filtering layers make the cause harder to isolate.
Forward the required UDP port on the router
Use this section only when the Network Report says the router is not forwarding a port. Read the port number from Online Play and forward that exact port to the host PC’s local IP address. Hytale’s traffic is UDP; forwarding TCP alone will not fix the connection.
Create the rule
- Sign in to the router’s administration page. The menu may be called Port Forwarding, Port Mapping, NAT Rules, or Virtual Server.
- Create a new rule with a recognizable name such as
Hytale. - Set the protocol to UDP. If the router offers “TCP/UDP,” use that only when it cannot create a UDP-only rule; UDP is the protocol Hytale requires.
- Enter the port reported by Hytale in the external and internal port fields, unless the router explicitly separates a range from a single port.
- Set the destination or server IP to the host computer’s local IPv4 address.
- Save or apply the rule, then restart Online Play and test from outside the home network.
Forwarding a port to the wrong device is a common silent failure. Recheck the host’s IPv4 address after every reboot, or create a DHCP reservation so the router always assigns the same address. Do not expose additional ports “just in case”; use only the port Hytale reports for that session.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhy a local test can mislead you
Some routers do not support NAT loopback, also called hairpin NAT. A friend connected to the same home network may fail even though an internet connection would work, or the reverse. Test with a friend on another network or with a phone hotspot rather than relying only on two devices inside the same LAN.
Diagnose double NAT and CGNAT
Double NAT
Double NAT occurs when two devices are routing traffic, commonly an ISP gateway plus a separate Wi-Fi router. A forwarding rule on only the inner router stops at the outer router. You can either forward the same UDP port on both devices, pointing the first router to the second router’s WAN address and the second router to the Hytale host, or place the second device in access-point/bridge mode and let the main router perform NAT.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Connecting the host directly to the main router can also remove an accidental second routing layer. After changing the topology, generate a fresh Network Report; an old report may describe the previous path.
CGNAT
With CGNAT, the ISP shares one public IPv4 address among multiple customers. Your router can accept a forwarding rule, but unsolicited traffic never reaches it from the public internet, so ordinary port forwarding cannot solve the Hytale error. Hypixel Studios’ guidance is to use Tailscale or ask the provider for a public IP.
Recommended Free Tools
Contact the ISP and ask specifically whether the connection is behind CGNAT and whether a public IPv4 address is available. This may be a paid or plan-dependent option. Do not confuse a private WAN address on the router with the public address shown by an external “what is my IP” service; the mismatch is a useful clue, not a reason to publish either address.
IPv6 as an alternative path
If both players have working IPv6 connectivity and the network permits it, Hytale’s official guidance says a direct IPv6 path does not require port forwarding. IPv6 availability varies by ISP, router, operating system, and firewall policy. Leave the host firewall enabled and test with the Network Report rather than manually opening unrelated IPv6 ports.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Test from a phone hotspot or another network
Connect the host or joining computer to a phone hotspot, then retry the same Hytale session. A successful join on the hotspot strongly indicates that the normal network—not the Hytale installation—is blocking or altering the traffic. This is especially informative for school, office, hotel, library, apartment, and public Wi-Fi networks.
- If the hotspot succeeds and home fails, inspect home-router forwarding, double NAT, and CGNAT.
- If the hotspot and home both fail, return to the Network Report, Windows Firewall, and antivirus checks.
- If a managed network blocks the connection, no local Hytale setting can override its upstream policy. Use an allowed network or ask the network administrator whether game traffic can be permitted.
Hotspot testing may consume mobile data and can have higher latency, so use it as a diagnosis rather than a guaranteed permanent hosting arrangement.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Dedicated-server firewall settings
The dedicated-server case differs from hosting through Online Play. Hypixel Studios’ current server manual states that Hytale uses the QUIC protocol over UDP, not TCP, and that the default server port is 5520. If you start the server with --bind and choose another port, substitute that custom UDP port in every firewall and router rule.
Windows dedicated server
Run PowerShell as an administrator on the server machine and create the documented inbound rule:
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
New-NetFirewallRule -DisplayName "Hytale Server" -Direction Inbound -Protocol UDP -LocalPort 5520 -Action AllowIf the server uses a custom bind port, replace 5520 with that value. The rule opens the Windows firewall only; internet hosting still requires a router rule when the server is behind NAT.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Linux dedicated server
For UFW, the equivalent allow rule is:
sudo ufw allow 5520/udpFor iptables, an equivalent inbound rule is:
sudo iptables -A INPUT -p udp --dport 5520 -j ACCEPTApply the corresponding custom port when using --bind, and make sure your distribution’s firewall persistence mechanism saves the rule after reboot. The server manual’s minimum figures are at least 4 GB of memory and Java 25. Those are configuration requirements, not a performance guarantee for every world size or player count.
Dedicated-server port checklist
- Server process is listening on the selected UDP port.
- Host operating-system firewall allows inbound UDP on that port.
- Router forwards the same UDP port to the server’s fixed local IP.
- Any second router is also forwarding, or has been placed in bridge/access-point mode.
- ISP is not using CGNAT, or an overlay/public-IP alternative is being used.
Troubleshoot by symptom
| Symptom | Likely cause | Next check |
|---|---|---|
| Friends cannot join immediately after installing Hytale | Windows Firewall has no allow rule | Allow Hytale on both Private and Public profiles, then restart the game. |
| It works on one Wi-Fi network but not another | Profile-specific firewall rule or network policy | Check the active Windows profile and run the hotspot test. |
| It works only when antivirus is disabled | Endpoint network filtering | Create a Hytale exception and restore antivirus protection. |
| Router rule exists but the report still says forwarding is missing | Wrong protocol, port, destination IP, or an additional router | Use UDP, match the report’s port, verify the host IP, and inspect for double NAT. |
| Home network fails but phone hotspot succeeds | Home router, CGNAT, or managed-network filtering | Check WAN addressing, double NAT, and ISP CGNAT status. |
| Dedicated server is reachable locally but not remotely | Operating-system rule works, router or ISP path does not | Verify UDP 5520 (or the custom bind port), router forwarding, and public-IP availability. |
| Connection times out after a router reboot | Host received a new local IP | Update the forwarding destination or create a DHCP reservation. |
Collect logs and contact support when the path is open
If the launcher continues to fail after the network path is corrected, collect the newest log that covers the incident. On Windows, the official launcher log is %APPDATA%Hytalehytale-launcher.log. On macOS, it is ~/Library/Application Support/Hytale/hytale-launcher.log.
When submitting a technical-support or bug report request, include the copied Network Report, the exact error text, operating system, whether the computer was on home Wi-Fi, Ethernet, hotspot, or a managed network, and the relevant launcher log. State which tests succeeded or failed—for example, “hotspot works, home router fails”—so support can distinguish an installation problem from NAT or policy filtering.
Quick Recap
Final verification checklist
- Online Play Network Report has been copied recently and its named port is known.
- Hytale is allowed through Windows Firewall on the profiles you actually use.
- Antivirus network filtering has an Hytale exception, if applicable.
- The router forwards the report’s port as UDP to the current host IP.
- Double NAT has been removed or configured on both routers.
- CGNAT has been ruled out, or Tailscale/public IPv4 is being used.
- A hotspot or external-network test has identified whether the original network is blocking traffic.
- For a dedicated server, the operating-system rule, router rule, bind port, Java 25, and 4 GB memory requirement have been checked.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
