October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk10 min

How to Enable RCON on a Garry’s Mod Server

Set a persistent rcon_password in garrysmod/cfg/server.cfg, restart your Garry’s Mod server, then connect with its IP, TCP port, and password. This guide covers hosting panels, verification, security, disabling RCON, and common errors.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To enable RCON on a Garry’s Mod server, set rcon_password to a non-empty password in garrysmod/cfg/server.cfg, save the file, and restart the server. An empty value, rcon_password "", disables RCON. The same console variable is used whether you edit the file yourself or use a hosting panel.

What RCON does on a Garry’s Mod server

RCON is the remote console interface for a Source engine server. It lets an authenticated administrator send server-console commands without opening the game, joining the server, or sitting at the machine that runs the server. That is useful for restarting maps, changing configuration, checking status, and carrying out routine administration when the server is hosted elsewhere.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Garry’s Mod uses Valve’s Source RCON Protocol over TCP. The usual SRCDS RCON port is TCP 27015, although a provider may assign a different port or place the server behind a proxy. The port used by your server is the one an RCON client must target; do not assume that a custom game port automatically means the RCON port is the same.

RCON authentication is controlled by one server console variable:

#1 Best Overall
Sale
Logitech G213 Prodigy Wired RGB Gaming Keyboard - Black
  • Personalize 5 customizable lighting zones with over 16.8M colors to match your setup or game and synchronize backlit lighting effects with other Logitech G devices using Logitech G Hub
  • G213 Prodigy is a full-sized keyboard designed for gaming and productivity, with a slim body built for gamers of all levels and durable construction to repel liquids, crumbs, and dirt for easy cleanup
  • Each key is tuned to enhance the tactile experience, delivering ultra-quick, responsive feedback while the anti-ghosting gaming matrix is tuned for optimal gaming performance, keeping you in control
  • G213 gaming keyboard features dedicated media controls that can play, pause, and mute music and videos instantly; easily adjust the volume or skip to the next song with the touch of a button
  • Customize lighting, game mode, and macro programming with Logitech G HUB software and stay comfortable during long gaming sessions thanks to an integrated palm rest and adjustable keyboard feet
  • rcon_password with a non-empty value enables password authentication.
  • rcon_password "" disables RCON.

RCON is separate from the password players use to join a password-protected server. Changing the player join password does not enable RCON, and changing the RCON password does not change who can connect as a player.

Before enabling RCON

Have the correct access

You need either file access to the server’s Garry’s Mod installation or a control panel that exposes the server configuration. On a conventional installation, the file is garrysmod/cfg/server.cfg. Managed hosts may expose that file through a text editor, a configuration page, or a field labeled for RCON. The interface varies, but the setting you are looking for remains rcon_password.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose a password that is used only for RCON

Use a long, random password that is not reused for your operating-system account, control panel, Steam account, or player password. Anyone who obtains the RCON password can issue commands accepted by the server console, so treating it like a privileged credential is appropriate. Do not place it in public documentation, screenshots, chat logs, or a repository.

Decide whether you need RCON running continuously

If you only need occasional remote administration, leave RCON disabled between maintenance sessions. Enabling it increases the number of services that must be protected. If you keep it enabled, restrict access to trusted administrator IP addresses where your hosting environment or firewall supports source-IP rules.

Enable RCON in server.cfg

The file-based method is the normal choice because it survives a restart. Follow these steps when you manage the files directly.

Rank #2
Sale
AULA F75 Pro Wireless Mechanical Keyboard,75% Hot Swappable Custom Keyboard with Knob,RGB Backlit,Pre-lubed Reaper Switches,Side Printed PBT Keycaps,2.4GHz/USB-C/BT5.0 Mechanical Gaming Keyboards
  • Tri-mode Connection Keyboard: AULA F75 Pro wireless mechanical keyboards work with Bluetooth 5.0, 2.4GHz wireless and USB wired connection, can connect up to five devices at the same time, and easily switch by shortcut keys or side button. F75 Pro computer keyboard is suitable for PC, laptops, tablets, mobile phones, PS, XBOX etc, to meet all the needs of users. In addition, the rechargeable keyboard is equipped with a 4000mAh large-capacity battery, which has long-lasting battery life
  • Hot-swap Custom Keyboard: This custom mechanical keyboard with hot-swappable base supports 3-pin or 5-pin switches replacement. Even keyboard beginners can easily DIY there own keyboards without soldering issue. F75 Pro gaming keyboards equipped with pre-lubricated stabilizers and LEOBOG reaper switches, bring smooth typing feeling and pleasant creamy mechanical sound, provide fast response for exciting game
  • Advanced Structure and PCB Single Key Slotting: This thocky heavy mechanical keyboard features a advanced structure, extended integrated silicone pad, and PCB single key slotting, better optimizes resilience and stability, making the hand feel softer and more elastic. Five layers of filling silencer fills the gap between the PCB, the positioning plate and the shaft,effectively counteracting the cavity noise sound of the shaft hitting the positioning plate, and providing a solid feel
  • 16.8 Million RGB Backlit: F75 Pro light up led keyboard features 16.8 million RGB lighting color. With 16 pre-set lighting effects to add a great atmosphere to the game. And supports 10 cool music rhythm lighting effects with driver. Lighting brightness and speed can be adjusted by the knob or the FN + key combination. You can select the single color effect as wish. And you can turn off the backlight if you do not need it
  • Professional Gaming Keyboard: No matter the outlook, the construction, or the function, F75 Pro mechanical keyboard is definitely a professional gaming keyboard. This 81-key 75% layout compact keyboard can save more desktop space while retaining the necessary arrow keys for gaming. Additionally, with the multi-function knob, you can easily control the backlight and Media. Keys macro programmable, you can customize the function of single key or key combination function through F75 driver to increase the probability of winning the game and improve the work efficiency. N key rollover, and supports WIN key lock to prevent accidental touches in intense games
  1. Stop the server or use the provider’s safe configuration editor. Stopping first avoids an overwrite if the server writes its configuration during shutdown. If your panel specifically supports editing while the server is running, follow its save procedure.
  2. Open the Garry’s Mod configuration directory. Locate garrysmod/cfg/server.cfg. The absolute path may include a provider-specific instance directory, but the final folders are normally garrysmod/cfg.
  3. Add the password assignment. Put this on its own line:
    rcon_password "Use-A-Long-Random-Secret-Here"
    Replace the example value with your own secret. Keep the quotation marks, especially if the password contains characters that could be interpreted as separators.
  4. Save the file without changing its name or extension. Confirm that you edited the server instance that actually launches your Garry’s Mod server. Multiple instances on one machine can each have a different server.cfg.
  5. Start or restart the server. The setting is intended to be loaded during startup. A restart also makes it clear which value is persisted in the file rather than merely held in the running process.
  6. Record the connection details securely. You will need the server’s reachable IP address or hostname, the RCON TCP port, and the exact password when connecting from an external client.

Do not add a leading comment marker such as // or ; to the line. A commented line is documentation, not an active setting. If the file already contains an rcon_password line, edit the existing active line instead of leaving conflicting assignments in multiple places.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Enable RCON through a hosting panel

Hosting panels use different labels and file layouts. Look for a server configuration editor, startup configuration, or an RCON/password field. Enter the same cvar value, rcon_password, and apply the change. Some panels write the value into server.cfg; others generate configuration files when the instance starts.

After saving, restart the Garry’s Mod instance from the panel. A panel may show a success message before the game process has reloaded the file, so wait for the server to finish starting before testing. If the panel has both an RCON field and a raw configuration editor, use one source of truth and check that it does not overwrite the other on the next restart.

If you cannot find an RCON control, ask the provider where the active server.cfg is stored or whether its template disables custom cvars. The cvar name does not change merely because the server is managed through a web interface.

Verify that RCON is enabled

Verification should include a restart. A value entered only into a live console can disappear when the process stops; the persistent file or panel setting is what matters for the next boot.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
SteelSeries Apex 3 Gaming Keyboard - Black | 10-Zone RGB Illumination – IP32 Water Resistant – Premium Magnetic Wrist Rest (Whisper Quiet Gaming Switch)
  • Ip32 water resistant – Prevents accidental damage from liquid spills
  • 10-zone RGB illumination – Gorgeous color schemes and reactive effects
  • Whisper quiet gaming switches – Nearly silent use for 20 million low friction keypresses
  • Premium magnetic wrist rest – Provides full palm support and comfort
  • Dedicated multimedia controls – Adjust volume and settings on the fly
  1. Restart the server after saving the password.
  2. Check the startup or server console for configuration errors. A malformed line, an accidental comment marker, or editing the wrong instance can leave the intended value unapplied.
  3. Connect with an RCON client using the server’s IP address, RCON TCP port, and password. The Valve protocol expects those three connection details.
  4. Send a low-impact administrative command that you are authorized to run. Confirm the response, then disconnect.
  5. Restart once more if you need to prove persistence. Reconnect with the same details after the second startup.

Do not test by repeatedly guessing passwords. Failed authentication attempts may be limited by the server’s RCON protection settings, and repeated failures can trigger a ban.

Connecting and issuing commands

External RCON clients

An external client connects to the server’s IP address, TCP port, and RCON password. Use the exact port supplied by your host; TCP 27015 is the protocol’s usual SRCDS default, not a guarantee that every deployment uses it. If the server has a hostname, verify that it resolves to the intended public address.

Keep the client and password private. RCON traffic is an administrative channel, so use it from a trusted network and avoid copying the secret into shell history, screenshots, or shared configuration files. The protocol connection is distinct from the game connection: a player may be able to join the game while the RCON port is blocked, or the RCON port may be reachable while the game port is not.

In-game console use

Third-party Garry’s Mod setup guides describe entering the password with the rcon_password command in the game console and then prefixing remote commands with rcon, for example rcon sv_cheats 1. Other guides also mention setting rcon_address to the server IP first. These sequences differ between guides and are not confirmed here against a current primary Garry’s Mod reference, so treat them as a compatibility check rather than the authoritative setup method.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For predictable administration, configure and test the server with a dedicated RCON client or the control panel’s console. Never run a command that changes gameplay, permissions, or files until you know whether it is being executed locally or through RCON.

Rank #4
Sale
TECKNET Wired Gaming Keyboard, RGB Backlit Keyboard with Metal Panel Design | 15-Zone RGB Illumination, Whisper Quiet Design, IP32 Water Resistance, 25 Anti-ghosting Keys, Ergonomic Design
  • 【Ergonomic Design, Enhanced Typing Experience】Improve your typing experience with our computer keyboard featuring an ergonomic 7-degree input angle and a scientifically designed stepped key layout. The integrated wrist rests maintain a natural hand position, reducing hand fatigue. Constructed with durable ABS plastic keycaps and a robust metal base, this keyboard offers superior tactile feedback and long-lasting durability.
  • 【15-Zone Rainbow Backlit Keyboard】Customize your PC gaming keyboard with 7 illumination modes and 4 brightness levels. Even in low light, easily identify keys for enhanced typing accuracy and efficiency. Choose from 15 RGB color modes to set the perfect ambiance for your typing adventure. After 30 minutes of inactivity, the keyboard will turn off the backlight and enter sleep mode. Press any key or "Fn+PgDn" to wake up the buttons and backlight.
  • 【Whisper Quiet Design】Experience near-silent operation with our whisper-quiet gaming switch, ideal for office environments and gaming setups. The classic volcano switch structure ensures durability and an impressive lifespan of 50 million keystrokes.
  • 【IP32 Spill Resistance】Our quiet gaming keyboard is IP32 spill-resistant, featuring 4 drainage holes in the wrist rest to prevent accidents and keep your game uninterrupted. Cleaning is made easy with the removable key cover.
  • 【25 Anti-Ghost Keys & 12 Multimedia Keys】Enjoy swift and precise responses during games with the RGB gaming keyboard's anti-ghost keys, allowing 25 keys to function simultaneously. Control play, pause, and skip functions directly with the 12 multimedia keys for a seamless gaming experience. (Please note: Multimedia keys are not compatible with Mac)

Changing the password while the server is running

You can change the cvar at runtime from the server console, but a runtime value is not a substitute for editing the persistent configuration. Add the new value to server.cfg, then restart when practical.

Changing rcon_password while the server is running causes the server to close all currently authenticated RCON connections. This is expected behavior, not evidence that the new password failed. Every client must authenticate again with the new value. If you change the password from an RCON session, that session can be closed immediately after the change.

Security settings and safe operating practices

Use a unique, high-entropy password

A short, familiar, or reused password makes online guessing more practical. Generate a random secret, store it in a password manager, and give it only to people who need administrative access. Because the standard configuration uses one shared RCON password, maintain an access list outside the server and remove access when an administrator no longer needs it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Restrict network access

Allow inbound TCP access to the RCON port only from trusted administrator addresses when your firewall or hosting panel supports that rule. If your IP changes frequently, use a secure administrative network rather than opening the port to every address. Do not confuse a game-server firewall rule with an RCON rule: the protocol is TCP and may require a separate rule from the ports used for player traffic.

Understand failed-login protection

Garry’s Mod exposes sv_rcon_maxfailures, which caps failed authentication attempts before a ban is applied. The exact operational effect depends on the server build and configuration, but the setting exists to limit repeated failures. A mistyped password can therefore produce a temporary access problem even when the configured password is correct. Stop guessing, verify the saved value, and check the server console or host controls for the resulting ban or failure message.

Best Value
GEODMAER 65% Gaming Keyboard, Wired Backlit Mini Keyboard, Ultra-Compact Anti-Ghosting No-Conflict 68 Keys Membrane Gaming Wired Keyboard for PC Laptop Windows Gamer
  • 【65% Compact Design】GEODMAER Wired gaming keyboard compact mini design, save space on the desktop, novel black & silver gray keycap color matching, separate arrow keys, No numpad, both gaming and office, easy to carry size can be easily put into the backpack
  • 【Wired Connection】Gaming Keybaord connects via a detachable Type-C cable to provide a stable, constant connection and ultra-low input latency, and the keyboard's 26 keys no-conflict, with FN+Win lockable win keys to prevent accidental touches
  • 【Strong Working Life】Wired gaming keyboard has more than 10,000,000+ keystrokes lifespan, each key over UV to prevent fading, has 11 media buttons, 65% small size but fully functional, free up desktop space and increase efficiency
  • 【LED Backlit Keyboard】GEODMAER Wired Gaming Keyboard using the new two-color injection molding key caps, characters transparent luminous, in the dark can also clearly see each key, through the light key can be OF/OFF Backlit, FN + light key can switch backlit mode, always bright / breathing mode, FN + ↑ / ↓ adjust the brightness increase / decrease, FN + ← / → adjust the breathing frequency slow / fast
  • 【Ergonomics & Mechanical Feel Keyboard】The ergonomically designed keycap height maintains the comfort for long time use, protects the wrist, and the mechanical feeling brought by the imitation mechanical technology when using it, an excellent mechanical feeling that can be enjoyed without the high price, and also a quiet membrane gaming keyboard

Turn RCON off when it is not required

To disable the service, replace the value in the persistent configuration with:

rcon_password ""

Save the file and restart the server. Clearing an RCON field in a hosting panel has the same intended result when the panel writes the corresponding empty cvar. Verify that no second configuration file or startup template restores an old password.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Common problems and fixes

Symptom Likely cause What to check
RCON works until the server restarts The password was entered only in the live console, or the wrong configuration file was edited. Put rcon_password in the active garrysmod/cfg/server.cfg or the panel’s persistent field, then restart and test again.
The server rejects the correct-looking password Extra whitespace, mismatched quotation marks, a stale client password, or a different active instance. Copy the value directly from the saved configuration, reconnect with the new value, and confirm the server was restarted after the edit.
The RCON client cannot reach the server Wrong address or port, a firewall rule, provider network filtering, or a server that has not finished starting. Use the provider-supplied IP and RCON port. Confirm that TCP access is allowed and that the process is online.
Connections disappear immediately after a password change Expected behavior when rcon_password changes at runtime. Reconnect every client with the new password. Persist the value in the configuration for the next restart.
Repeated tests result in a ban Failed-authentication protection, including sv_rcon_maxfailures. Stop retrying, inspect the server console or host controls, and resolve the saved-password or network-address problem before testing again.
The panel has no visible RCON option The host may hide raw cvars or use a custom configuration template. Open the advanced configuration editor or ask where the active server.cfg is located. Request the setting by its exact name, rcon_password.
RCON is disabled unexpectedly The value is empty, a template overwrote it, or another startup configuration supplied an empty value. Search the active configuration sources for rcon_password, remove conflicting entries, set one non-empty value, and restart.

Configuration reference

Item Value or behavior Qualification
Enable variable rcon_password A non-empty value enables password authentication.
Disable value rcon_password "" An empty password disables RCON.
Typical file garrysmod/cfg/server.cfg Hosting layouts can place the active file elsewhere.
Protocol Valve Source RCON over TCP RCON is not a UDP-only game query.
Usual port TCP 27015 This is the SRCDS default; use the assigned port if it differs.
Runtime password change Closes authenticated RCON connections Clients must authenticate again.
Failed-login control sv_rcon_maxfailures Caps failed authentication attempts before a ban.

Should you use a launch option instead?

Most setup instructions use server.cfg or a hosting-panel field because those methods are visible, persistent, and easy to audit. A +rcon_password launch option is sometimes suggested for Source servers, but its behavior for a current Garry’s Mod deployment was not established here. Do not rely on a launch option unless your host documents that exact method and you have verified the value survives a restart.

A practical maintenance checklist

  • Confirm that the server instance and configuration path are the intended ones.
  • Set one non-empty rcon_password value in the persistent configuration.
  • Use a unique random secret and store it securely.
  • Restart the server after saving.
  • Allow TCP access only from trusted administrator networks where possible.
  • Test once with the correct IP, port, and password rather than repeatedly guessing.
  • Re-test after a second restart if persistence matters.
  • Remove or replace the password when an administrator no longer needs access.
  • Set rcon_password "" and restart when RCON is no longer required.

Frequently Asked Questions

Is the RCON password the same as the server’s player password?

No. RCON uses the rcon_password cvar and authenticates administrative console connections. The password that players enter to join the game is a separate setting.

Does RCON provide access to the server’s files or operating system?

No. RCON is a Source server-console protocol. It does not replace file-transfer, shell, or hosting-panel access, although commands issued through it can affect the running game server.

Does RCON require UDP?

The Source RCON protocol uses TCP. A game server may use other protocols and ports for player traffic, but the RCON connection itself must reach the configured TCP port.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why can changing the password log me out immediately?

A runtime change to rcon_password closes all authenticated RCON connections by design. Reconnect with the new password after the change.

What should I do if my host does not show server.cfg?

Use the panel’s advanced configuration editor or ask support for the active Garry’s Mod configuration path. Request the setting by its exact cvar name, rcon_password, and restart after it is applied.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.