Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PC×
Skip to content
World desk8 min

How to Configure RCON on a Minecraft Java Server

A complete Minecraft Java Edition RCON guide: edit server.properties safely, choose a port, restart, connect a remote console, and restrict the unencrypted service with firewall allow-lists.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To configure RCON on a Minecraft Java Edition server, stop the server, edit server.properties, set enable-rcon=true, add a long non-empty rcon.password, choose a free TCP rcon.port (25575 is the documented default), and restart the server. RCON then lets an external client or script send console commands. Because it provides administrative control and is unencrypted, keep the port behind a firewall and restrict it to trusted source IP addresses.

This guide covers self-managed installations and hosting panels. It does not establish a Bedrock Edition procedure; the documented settings here are for Java Edition.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What RCON does

RCON means Remote CONsole. Minecraft’s server process listens for authenticated RCON connections and accepts commands from a separate client, script, or remote shell. The commands run with server-console authority, so an RCON connection can change gameplay, manage players, alter worlds, and perform administrative actions that a normal in-game player cannot.

That power makes RCON useful for scheduled broadcasts, moderation tools, deployment scripts, monitoring, and remote administration when you cannot use a hosting control panel. It also means the configuration is a security boundary: anyone who obtains the password and reaches the port may be able to control the server.

#1 Best Overall
Mattel Games UNO Minecraft Card Game for Kids, Adults, Families & Parties, Deck & Special Rule Inspired by the Video Game, 2 to 10 Players
  • Now Minecraft lovers can play a special version of UNO!
  • Same as Basic UNO but features Minecraft characters and includes special Creeper rule card. Draw this card and the other players have to draw three more cards from the pile!
  • The goal is to get rid of all the cards in your hand.
  • First player or team to 500 wins.
  • When you're down to one card, don't forget to yell "UNO"!

Before changing the file

  • Confirm the edition. The settings described here apply to Minecraft Java Edition. Bedrock Edition behavior is not established by the available documentation.
  • Locate the server directory. On a self-managed installation, this is the folder containing the server’s server.properties. On managed hosting, use the provider’s file manager or configuration editor if RCON is not already exposed through its console.
  • Have permission to restart. A restart is required; editing the file alone does not apply RCON changes.
  • Choose a secure password first. Use a long, unique, randomly generated value that is not reused for the game panel, operating-system account, or another service.
  • Plan the network path. Decide which administration device or automation host must connect, then allow only those source addresses through the firewall.

Configure RCON in server.properties

  1. Stop the server cleanly. Do not edit the file while Minecraft is running. The server can rewrite configuration during shutdown, potentially overwriting an in-progress edit.
  2. Open server.properties. Use a plain-text editor or your hosting panel’s file editor. Preserve the existing key=value format and do not add quotation marks around values.
  3. Enable RCON. Set enable-rcon=true. RCON is disabled by default.
  4. Set a non-blank password. Replace the example value with your generated secret. If RCON is enabled with an empty password, it will not start.
  5. Select the listening port. Set rcon.port to a free TCP port. Minecraft Wiki documentation lists 25575 as the default. A different unused port is appropriate when another service already occupies 25575.
  6. Decide whether operators should see RCON activity. Set broadcast-rcon-to-ops explicitly. The Minecraft Wiki example uses false, while another reference reports a default of true; because those defaults conflict, do not rely on an implicit value.
  7. Save the file and restart Minecraft. The new settings take effect only after the server has been restarted.

A minimal configuration, with an intentionally illustrative password, looks like this:

enable-rcon=true
rcon.password=use-a-long-random-string
rcon.port=25575
broadcast-rcon-to-ops=false

Replace use-a-long-random-string before starting the server. Treat the password as a secret: do not paste it into public issue trackers, chat rooms, screenshots, or automation logs.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Property reference

Property Value to use Purpose and qualification
enable-rcon true or false Turns the RCON listener on or off. RCON is off by default.
rcon.password Long, unique, non-empty string Shared secret required by the RCON client. A blank value prevents RCON from starting when it is enabled.
rcon.port Free TCP port; 25575 is the documented default Port on which the server accepts RCON connections. The exact upper limit is reported inconsistently as 65535 or 65534; selecting an available port below 65535 avoids that edge case.
broadcast-rcon-to-ops true or false Controls whether RCON output is broadcast to operators. The example in Minecraft Wiki uses false; reported defaults conflict, so set it deliberately.

Restart and verify the listener

After saving, start the server and wait for the normal startup completion. If the server fails to start or the console reports an RCON error, stop it and inspect the four properties for spelling, duplicate lines, an empty password, and a port collision.

Rank #2
Mattel Games UNO Minecraft Card Game with Storage Tin,Ages 7+
  • The classic UNO card game builds fun on game night with a Minecraft theme.
  • UNO Minecraft features a deck and storage tin decorated with graphics from the popular video game.
  • Players match colors and numbers to the card on top of the discard pile as in the classic game.
  • The Creeper card unique to this deck forces other players to draw 3 cards.
  • Makes a great gift for kid, teen, adult and family game nights with 2 to 10 players ages 7 years and older, especially Minecraft and video game fans.

Use an RCON client that supports Minecraft’s protocol and enter:

  • Host: the server address as seen from the client. Use 127.0.0.1 or localhost only when the client runs on the same machine.
  • Port: the exact number in rcon.port.
  • Password: the exact value in rcon.password, including capitalization and punctuation.

Test with a harmless, read-only console command supported by your server, such as a player-list query. A successful response confirms authentication and command execution. Disconnect immediately after testing if the client is not needed continuously.

Make the network path work without exposing RCON unnecessarily

Local administration

If the client and Minecraft server share a machine, bind access to the local host where your operating system or hosting panel allows it, and avoid opening the port on the public interface. This keeps RCON available to local scripts without making it reachable from the internet.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
UNO Video Game Cards Set - Bundle with Minecraft, Super Mario, Teenage Mutant Ninja Turtles UNO Cards for Kids Plus Stickers, More | Minecraft, Mario, TMNT Activities for Kids, Family Game Night
  • UNO Video Game Cards Set - Bundle with Minecraft, Super Mario, Teenage Mutant Ninja Turtles UNO Cards for Kids Plus Stickers, More | Minecraft, Mario, TMNT Activities for Kids, Family Game Night.
  • This video game card game set comes with three deck of UNO cards featuring unique artwork from Mario Kart, Minecraft, and Teenage Mutant Ninja Turtles.
  • Sure to be a hit with all video game fans, this collectible UNO card deck 3 pack is perfect to give your video game fan. Each UNO deck includes slightly different rules for endless fun!
  • Play at your next family game night, these Super Mario, Minecraft, and TMTN editions of UNO each provide a new, fun twist on the classic card game. Great for the whole family.
  • Officially licensed Minecraft, Mario Kart, and Teenage Mutant Ninja Turtles UNO card game set for kids and adults alike.

Private remote administration

For a remote administrator, place the server and the administrator’s device on a private network or VPN when possible. Permit the RCON port only from the VPN address range or the specific trusted public IP addresses. This is safer than accepting connections from every address.

Publicly reachable server

If players connect through the internet, that does not require the RCON port to be public. Forward or allow the game port separately from RCON. On the firewall or cloud security group, create an inbound rule for the chosen RCON TCP port whose source is an explicit allow-list, not “anywhere.”

The Minecraft Wiki warns that RCON traffic is not encrypted and can be exposed to man-in-the-middle attacks. A firewall and IP allow-list reduce who can reach the service, but they do not encrypt the password or commands in transit. Do not treat a random port number as protection.

Rank #4
Sale
Ravensburger 21580 Minecraft Explorers - Cooperative Card Game for 2-4 People Ages 8 and up
  • The cooperative Minecraft card game invites 2-4 players aged 8 and up to explore the picturesque landscapes of Minecraft and search for hidden treasures
  • Experience Minecraft as a new, exciting adventure and fill your chests with treasures before you are caught by the monsters
  • Only if you work well as a team and combine luck with strategy can you win the game together.
  • The card game for 2-4 people is entertaining and varied, lots of fun and perfect for taking with you thanks to its practical travel format.
  • The card game is perfect for every family or friends game night and a great gift for all small and big fans of Minecraft.

Security checklist

  • Generate a password that is long, random, and used only for RCON.
  • Store it in a secret manager or protected environment variable instead of source code.
  • Allow the RCON TCP port only from trusted administration or automation addresses.
  • Keep RCON off (enable-rcon=false) when no remote console is required.
  • Do not publish the port in server listings, screenshots, support posts, or status pages.
  • Use a private network or VPN for remote access when practical, because RCON itself is unencrypted.
  • Rotate the password after staff changes, suspected disclosure, or migration to a new host.
  • Review automation logs so they cannot capture the password or sensitive command output.
  • Give scripts only the access they need operationally, and test destructive commands in a non-production server first.

Hosting-panel console versus self-managed RCON

Question Hosting-panel console Self-managed RCON
Is a port required? Often no: the provider may proxy console access inside its panel. Verify the provider’s current documentation. Yes, the server listens on the configured RCON TCP port and the network must permit the connection.
Setup effort Usually lower if a console feature is already enabled; exact labels and capabilities vary by provider. Requires editing server.properties, restarting, and securing firewall rules.
Programmatic access Depends on whether the provider exposes an API or RCON credentials. Designed for external clients and scripts that can reach the listener.
Security surface Uses the provider’s account controls and infrastructure, so review panel roles and account security. You control the password, firewall, network exposure, and host hardening.

Check the hosting panel before opening a firewall port. Some providers already offer a browser console or an RCON toggle; enabling a second public path can create unnecessary exposure.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshoot common failures

“Connection refused” or timeout

  • Confirm the server is running and was restarted after the edit.
  • Check that the client uses the same port as rcon.port.
  • Verify that the host firewall, cloud security group, router, and hosting panel all permit that TCP port from the client’s source address.
  • Check whether the client is using a private address from outside the private network, or a public address from inside a network that does not support loopback.
  • Make sure another service is not already using the selected port. Choose a free port and update the firewall rule to match.

Authentication fails or the password is reported as invalid

  • Re-enter the password exactly, including case, spaces, and punctuation.
  • Ensure rcon.password is not blank and that there is only one active line with that key.
  • Confirm the client is connecting to the intended server; a stale DNS record or forwarded port can send credentials to a different host.
  • After changing the password, save the file and restart before testing again.

RCON appears enabled but does not start

  • Check that the property is spelled enable-rcon=true, with no extra spaces or quotation marks.
  • Inspect startup output for a port-binding error or another configuration failure.
  • Pick an unused TCP port within the supported range. Published references disagree only on whether 65535 itself is included; using a lower value avoids that boundary.
  • Verify that the server process actually loaded the file you edited, especially when multiple server instances or hosting-panel profiles exist.

Operators see unexpected messages

Review broadcast-rcon-to-ops. Set it explicitly to true if operators should receive RCON output, or false if output should remain with the remote client. Restart after changing the value.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Using RCON for scripts and operations

For automation, keep the RCON connection details outside the script’s source code. Supply the host, port, and password through protected configuration or environment variables, and restrict the automation host’s firewall identity to the RCON port. Log connection failures and command outcomes, but redact the password and avoid storing sensitive output unnecessarily.

Best Value
Minecraft Playing Cards - Standard Deck of Cards in Collector Travel Tin
  • STANDARD DECK: This deck of Minecraft cards features the iconic characters from the series on the faces of each card and a protective, giftable storage tin that any Minecrafter or card player will love
  • COLLECTIBLE TIN: The cards come in a decorative storage tin in the design of the classic Minecraft icon, making them perfect for fans or gamers. Add some retro fun to your next poker night
  • TRAVEL GAMES: Whether you like go fish, gin rummy, blackjack, poker, old maid or solitaire, this deck is perfect to bring along in the car or your purse so you are always ready to play
  • NOVEL AND ORIGINAL: For those in the fandom looking for novelty items and all things geek, crazy, and unique, Paladone is your best source for top selling toys, mugs, collectibles, and novelties
  • OFFICIALLY LICENSED: This quality collectable is a unique addition to any fan's set. Give this cool collector's merchandise to mums, dads, fans, grads, kids, guys, and gals who love pop culture fun

Separate routine, reversible tasks from destructive administration. A scheduled announcement or status check is easier to recover from than a world-management command. Test scripts against a disposable Java server, add timeouts and retry limits, and make sure a network outage cannot cause a loop that repeatedly submits a command.

When automation is retired, disable RCON or rotate the password and remove the firewall allow-list entry. Leaving an unused listener enabled expands the attack surface without providing a benefit.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Version and port-range caveats

Property names, defaults, and accepted values can change with Minecraft releases or server distributions. The Minecraft Wiki lists 25575 as the default RCON port and describes a valid port range of 1–65535; another published result lists 1–65534. The difference does not affect normal configuration: choose a free TCP port below 65535, record it consistently in the server, firewall, and client, and verify the current documentation before a major version upgrade.

Do not assume a guide written for one hosting panel, modded server, or release applies unchanged to another. Confirm which server instance owns the file, which Java Edition version is running, and whether the provider supplies a managed console instead of a directly reachable RCON listener.

Quick Recap

Bestseller No. 1
Mattel Games UNO Minecraft Card Game for Kids, Adults, Families & Parties, Deck & Special Rule Inspired by the Video Game, 2 to 10 Players
Mattel Games UNO Minecraft Card Game for Kids, Adults, Families & Parties, Deck & Special Rule Inspired by the Video Game, 2 to 10 Players
Now Minecraft lovers can play a special version of UNO!; The goal is to get rid of all the cards in your hand.
$7.99
Bestseller No. 2
Mattel Games UNO Minecraft Card Game with Storage Tin,Ages 7+
Mattel Games UNO Minecraft Card Game with Storage Tin,Ages 7+
The classic UNO card game builds fun on game night with a Minecraft theme.; The Creeper card unique to this deck forces other players to draw 3 cards.
$11.66

Quick preflight checklist

  1. Java Edition confirmed.
  2. Server stopped before editing.
  3. enable-rcon=true entered once.
  4. Non-empty, unique rcon.password saved securely.
  5. Free TCP rcon.port selected and recorded.
  6. broadcast-rcon-to-ops set intentionally.
  7. Server restarted.
  8. Firewall permits the port only from trusted addresses.
  9. RCON client tested with the correct host, port, and password.
  10. Password and command output protected in scripts and logs.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.