The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →To remove someone from a Palworld server, authenticate as an administrator with /AdminPassword, run /ShowPlayers, then use /KickPlayer <SteamID> for a temporary disconnect or /BanPlayer <SteamID> for a persistent block. To reverse a ban, use /UnBanPlayer <SteamID>. For remote administration, enable Palworld’s REST API and send POST /kick or POST /ban with the player’s userid.
Playing with friends? Godlike.Host runs hosted Palworld servers from 10 data-center locations, with free DDoS protection.
This guide covers the current documented workflow, identifier differences, configuration, REST security, the limits of RCON, and recovery steps when a command fails.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Choose the right removal method
| What you need to do | Use | What it does | Identifier |
|---|---|---|---|
| Disconnect a player now | /KickPlayer |
Ends the current connection; the player can return if they are allowed to reconnect | SteamID in the game command |
| Block a player from returning | /BanPlayer |
Adds the player to the server’s ban controls | SteamID in the game command |
| Permit a banned player again | /UnBanPlayer |
Removes the ban | SteamID in the game command |
| Administer without joining the game | REST API | Remote kick, ban and unban operations | userid in the API request |
The in-game route is the least ambiguous because /ShowPlayers displays the IDs that the commands expect. The REST route is better for a control panel, script or monitoring system, but its authentication setup and exact ID format must be confirmed against the documentation for your server build.
What you need before using an admin command
- Access to the server’s configuration file and permission to restart the server.
- An
AdminPasswordvalue configured before the server starts. - A character connected to the server when using chat commands.
- The target player’s ID, copied exactly from
/ShowPlayers. - A recent server backup if you intend to edit ban data manually.
Do not confuse the administrator password with a player’s Steam password. It is a server setting used to grant admin rights. Keep it out of public chat, screenshots and shared configuration files.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Kick or ban a player from inside Palworld
1. Set the administrator password
Stop the server, open its server configuration file, set AdminPassword to a strong value, save the file and start the server again. The password must be present when the server starts; adding it only after you have joined will not authenticate the current session.
The exact location and editing interface depend on whether you run the server yourself or use a hosting control panel. Use the panel’s configuration editor when one is provided rather than editing a generated file that the panel may overwrite.
Recommended Free Tools
2. Authenticate in chat
Join the server and enter the following command in chat:
/AdminPassword your-password
Replace your-password with the value in the server configuration. Successful authentication grants administrator rights for that session. You must run the command again after reconnecting; a restart or a normal disconnect does not preserve the session authorization.
3. Display online players and their IDs
Run:
/ShowPlayers
The result lists connected players and their identifiers. Copy the target player’s ID exactly, including every digit and any prefix. Do not rely on a display name: names can be duplicated, changed, or affected by character encoding.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
4. Kick a player temporarily
Use:
/KickPlayer <SteamID>
Replace <SteamID> with the value returned by /ShowPlayers. The command disconnects the selected player without creating a lasting ban. A kick is appropriate for a brief disruption, a rules reminder, troubleshooting a stuck session, or clearing a connection so the player can try again.
5. Ban a player
Use:
/BanPlayer <SteamID>
Check the ID before pressing Enter. A ban is the enforcement action to use when the player must not reconnect. Record the reason and the date in your own moderation log; Palworld’s command itself does not provide a complete audit trail for your team.
6. Unban a player
To reverse a ban, run:
/UnBanPlayer <SteamID>
Use the same identifier associated with the ban. If the player is still connected through an existing session, remove that connection separately with a kick or have the player reconnect after the unban is applied.
SteamID, platform IDs and cross-play
The in-game commands are documented around a SteamID. Secondary guides commonly show the Steam form as steam_ followed by a numeric identifier, but the safest source for a command is the exact value printed by /ShowPlayers.
Cross-play changes the identifier a moderator sees. Secondary documentation reports that Xbox and PlayStation 5 players use their platform UserID rather than a Steam identifier. Treat that detail as a practical warning, not a reason to guess: copy the ID exposed by your server and test with a kick before applying a permanent ban when the platform is unclear.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
The REST API uses a field named userid. The available documentation does not establish one universal textual format for that field across Steam, Xbox and PlayStation players, so do not convert a SteamID, trim a prefix or substitute a display name unless your server’s API documentation explicitly instructs you to do so.
Use the REST API for remote administration
Enable the API and choose its port
In the server configuration, enable the API with:
RESTAPIEnabled
Set the listening port with:
RESTAPIPort
Restart the server after changing either setting. A port value reported by secondary guides is 8212 as the REST default, but treat that as a configuration value to verify rather than an assumption. Your server may use another port, and a host’s firewall or proxy can change how the endpoint is reached.
Kick through the API
The documented operation is POST /kick. Its request accepts a required userid and an optional message. A generic request body is:
{
"userid": "PLAYER_USER_ID",
"message": "Please reconnect after resolving the connection issue."
}Send that JSON to the server’s REST address and configured port. Replace PLAYER_USER_ID with the API identifier for the player; do not assume that the value is identical to the string shown in the in-game player list.
Ban through the API
The documented operation is POST /ban. It accepts the same userid field and an optional message:
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
{
"userid": "PLAYER_USER_ID",
"message": "Banned for repeated rule violations."
}Use a ban only after confirming the target identifier. A typo can affect no one, while a copied identifier belonging to another platform account can affect the wrong player.
Unban through the API
A separate unban endpoint is documented. Use the endpoint and request format specified for your installed server documentation, supplying the same player identity used when the ban was created. The available material confirms that the endpoint exists but does not establish one universal identifier format for every platform.
Authentication is a deployment-specific question
Do not hard-code an authentication scheme from an unofficial tutorial. The available official material does not clearly confirm the REST authentication method. Some secondary guides describe HTTP Basic authentication with the username admin and the administrator password, but that report is low-confidence and should be verified against the current official API page or your host’s documentation before implementation.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsUntil you have verified authentication, treat the request examples above as payloads, not complete production commands. Your client may also need an authorization header, TLS termination, a reverse proxy or a host-specific access token.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Protect the REST endpoint
- Bind the API to a private interface or private network when your hosting setup allows it.
- Use firewall rules or a VPN so the management port is reachable only by administrators.
- Do not expose port 8212 publicly merely because it is a commonly reported default.
- Never post the administrator password in a script repository, chat channel or public issue.
- Log administrative requests without logging passwords or reusable authorization headers.
- After changing the password or API exposure, restart the server and test from an administrator-only network.
A REST endpoint exposed directly to the internet is an administrative control surface. If your host supplies a private console, allow-list or managed proxy, prefer that over opening a game-server port to every address.
Why RCON should not be your new automation path
RCON still appears in older Palworld tutorials and may work on some installations, but Pocketpair marks it as deprecated and recommends moving to the REST API. The documentation says RCON is scheduled to stop working in an upcoming update without publishing a specific removal date. Community reports also describe RCON failures after version 0.1.5.0, but those reports are anecdotal and old.
RCON has an additional limitation involving multi-byte characters in player names. That makes name-based workflows especially fragile for international communities. If you maintain an existing RCON integration, use it only as a temporary compatibility measure and plan a REST migration rather than building new moderation tooling around it.
Free tools Windows power users keep installed
One-click scans. No signup required.
Where ban data is stored
Secondary search documentation places the ban list at Pal/Saved/SaveGames/banlist.txt. This path has medium confidence and should be verified on your running server before you rely on it for operations.
If the file exists and you must edit it through a host file manager:
- Stop the server cleanly.
- Download or copy the current file as a backup.
- Make the smallest possible edit, preserving line endings and encoding.
- Upload the file, start the server, and test with the affected account.
- Keep the backup until you confirm that unrelated players can still join.
Direct file editing is a recovery technique, not the first choice for routine moderation. A malformed file, a panel-generated overwrite or an incorrect identifier can create a wider access problem than the original ban.
Troubleshoot commands that do not work
| Symptom | Likely cause | What to check |
|---|---|---|
| The server says you are not authorized | The admin password was not set before startup, or the current connection has not authenticated | Confirm AdminPassword in the configuration, restart if necessary, then run /AdminPassword again in the current session |
/ShowPlayers returns no useful match |
The player has already disconnected, or the wrong account was selected | Run the command again and copy the current ID rather than using a saved display name |
| A kick works but the player immediately returns | A kick is not a ban | Use /BanPlayer after verifying the ID if the player must be blocked |
| A ban appears ineffective | The wrong identifier was used, the player is already connected, or the command was not executed with admin rights | Re-authenticate, obtain a fresh ID, apply the ban, then remove any existing session |
| The REST request cannot connect | The API is disabled, the port is wrong, or a firewall blocks it | Check RESTAPIEnabled, RESTAPIPort, the server restart, listening address and firewall rules |
| The REST server rejects the request | Authentication, content type, endpoint or identifier format is wrong | Compare the request with the current official API documentation and verify the required authorization method |
| RCON stopped responding after an update | RCON is deprecated and may have changed or failed | Move the integration to the REST API instead of depending on a removal date that has not been published |
A safe moderation workflow
- Capture the player’s current ID with
/ShowPlayersor the API’s player data. - Confirm the account and reason with another moderator when a permanent ban is being considered.
- Use a kick for a temporary intervention; use a ban only when continued access should be blocked.
- Record the identifier, action, timestamp and reason in a private moderation log.
- Keep the administrator password and REST access restricted to trusted staff.
- Review the ban later and use
/UnBanPlayeror the documented REST unban operation when the decision is reversed.
This process separates identity verification from enforcement, which is particularly important when Steam, Xbox and PlayStation players share the same world.
Quick Recap
Key points to remember
- Authenticate first with
/AdminPassword; commands will not work as ordinary chat commands. - Use
/ShowPlayersto obtain the live identifier before kicking or banning. /KickPlayerdisconnects;/BanPlayerblocks future access;/UnBanPlayerreverses a ban.- REST requests use a
useridfield, but the exact cross-platform format and authentication method require confirmation for your deployment. - RCON is deprecated, and its removal date has not been specified.
- Do not expose the REST management port directly to the public internet.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
