Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →To password-protect a current Starbound dedicated server, stop it, run it once so it creates its configuration, then edit storage/starbound_server.config. Add separate account-bound entries under serverUsers, set allowAnonymousConnections to false, save valid JSON, and restart. Friends connect from Multiplayer with the server address, account name, and password.
Prefer not to run the server on your own PC? Godlike.Host offers hosted Starbound servers with free DDoS protection and up to three free backups a day.
The password controls access to the server; it does not bind a character or inventory to a particular account. Keep a normal player account for friends and a separate administrator account for whoever needs server commands.
As an Amazon Associate I earn from qualifying purchases.
What “private” means in Starbound
A private Starbound server is one that requires an account and password before accepting a connection. The server can still be reachable from the internet, but an unauthenticated player cannot enter it. Privacy therefore has two parts:
- Authentication: the server checks a configured account and password.
- Reachability: the address and TCP port must be accessible through the host computer’s firewall and, for remote friends, the router.
Changing only the password entries is not enough if anonymous connections remain enabled. Conversely, disabling anonymous connections does not help a friend if the port is blocked or the address is wrong.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Password protection also does not encrypt traffic or hide the server from network scans. Its purpose is to prevent players who lack a configured credential from joining. Treat the address and credentials as private information, and use the firewall and router rules to limit exposure to the one game port the server needs.
Use the configuration generated by your installed server
Starbound server instructions differ by release. The current dedicated-server workflow generates starbound_server.config inside the server’s storage directory. Older hosted-server tutorials edit default_configuration.config and use a serverPasswords array instead.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Use the file created by the server you actually installed. If that file contains a serverUsers object, use the account-bound method below. Only follow the legacy method when your installation genuinely exposes serverPasswords and does not support serverUsers; do not paste keys from one configuration format into the other.
The older Windows tutorial that lists the password-array approach was published on November 29, 2013. Its age is a warning to verify every key against the file generated by your executable rather than assuming an old screenshot or path still applies.
Before you edit anything
- Make sure you have access to the dedicated-server installation directory and permission to modify its files.
- Know whether you are hosting locally or behind a router. Remote players need the host’s public address or DNS name, not merely the host computer’s local name.
- Choose two distinct credentials if you need administration: one ordinary player account and one administrator account.
- Decide on passwords that are not reused for Steam, email, or other services. Anyone who knows the administrator password can use the privileges assigned to that account.
- Plan a backup location outside the
storagedirectory so you can restore the last working configuration. - Have a plain-text editor available. A word processor can insert smart quotation marks or other formatting that makes the JSON invalid.
Step-by-step: password-protect the current server
1. Stop the server and generate its configuration
Stop the dedicated server cleanly before editing. If it has never been started, launch it once and let it finish creating its files, then stop it again. The generated file is normally:
<server installation>/storage/starbound_server.configThe exact parent directory depends on where you installed or selected the server. Do not create a second file with a similar name in another directory; the running executable reads the configuration in its own storage folder. If you run more than one instance, verify which executable and storage directory belong to the instance your friends will use.
2. Back up starbound_server.config
Copy the file and give the copy a clear name, such as starbound_server.config.before-password. Keep the backup until you have connected successfully from a client. A backup is especially important because Starbound can replace a malformed configuration when it starts.
Keep the backup separate from automatic files named starbound_server.config.old. The .old file is created by Starbound during syntax-error recovery and may represent the broken version, not a known-good version.
3. Add account-bound entries under serverUsers
Open the generated file in a plain-text editor that preserves JSON punctuation. Add or edit the serverUsers object. A minimal arrangement with one administrator and one ordinary player looks like this:
{
"serverUsers" : {
"admin" : {
"admin" : true,
"password" : "MyAdminPassword"
},
"player" : {
"admin" : false,
"password" : "MyPlayerPassword"
}
}
}Use your own account names and long, unique passwords. The names are credentials for this server, not necessarily the players’ Steam names. The admin Boolean controls privilege: true grants administrator permissions, while false creates a normal player login.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
You can create more than one ordinary account if you want to revoke one person’s access without changing everyone else’s password. Give each person only the account they need. Avoid using the same name for an administrator and a player, because the account entry is the identity the server evaluates at login.
Do not assume that a player’s character, ship, inventory, or other saved data is tied to one of these account names. The account entries are used to password the server; they are not a character-identity system. Changing a login therefore should not be treated as a way to transfer or isolate character progress.
If the generated file already contains other settings, preserve them and insert the object at the correct level. JSON permits one comma between adjacent properties, but not an extra comma after the final property. Key names and Boolean values are case-sensitive: use serverUsers, admin, password, true, and false exactly as shown.
4. Disable anonymous connections
Find allowAnonymousConnections in the configuration. In the documented Linux configuration, its default is true, which permits connections from accounts that have not authenticated. Change it to:
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems"allowAnonymousConnections" : falseThis setting is what makes the password requirement enforceable. Leaving it at true can allow an unauthenticated connection even though you added passwords. If the key is absent, add it at the same top level as the other server settings, following the syntax of the generated file. Do not write "false"; quotation marks turn it into text rather than the required JSON Boolean.
5. Validate the JSON before restarting
Check every opening and closing brace, quotation mark, colon, and comma. Common mistakes include using smart quotation marks copied from a word processor, placing false in quotation marks, and leaving a comma after the final account.
Start the server only after the file is syntactically valid. If Starbound detects syntax errors at startup, it renames the broken file to starbound_server.config.old and writes a default configuration in its place. That recovery behavior can make your password settings appear to vanish. Stop the server, compare the new file with your backup, correct the JSON, and start again.
Make one small change at a time. Adding accounts, changing the anonymous-access flag, and changing unrelated gameplay settings in one edit makes it harder to identify which punctuation error caused a failure.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 116. Restart and watch the server output
Restart the dedicated server and wait until it finishes loading. If it immediately regenerates the configuration, stop it and restore the backup rather than continuing with an unknown default. Once the server stays running with your edited file, test locally before asking friends to troubleshoot an internet connection.
After startup, stop the process once more and reopen the file if you need to confirm that the entries remain present. A successful process launch is not, by itself, proof that the intended file was read; editing the wrong instance’s storage directory can produce a server that starts with different settings.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
7. Test locally, then test remotely
On the same computer, a local client can use 127.0.0.1 as the server address. Enter the player account and its password in Multiplayer and select Join Server. A successful local login confirms that the JSON and authentication settings work.
After the local test, ask a friend outside your home network to connect using the address that reaches your router or hosted machine. A server can authenticate correctly and still be unreachable from the internet if forwarding or firewall rules are missing. If you do not have a second network available, a friend’s mobile or other external connection is a better test than reconnecting from the same home Wi-Fi.
Free tools Windows power users keep installed
One-click scans. No signup required.
How friends join the private server
- Open Starbound and choose Multiplayer.
- Enter the server’s IP address or DNS name.
- Enter the account name you created under
serverUsers. - Enter that account’s password.
- Select Join Server.
Give friends the ordinary player credentials, not the administrator credentials. If the client allows the account and password fields to be blank, that is for servers that permit anonymous access; a password-only server requires the configured values.
Tell friends whether the address is local or public. A private address works for players on the same network, while remote players need the public address or DNS name that resolves to the router or hosted machine. If you change the public address, update the people who have the old one.
Networking: TCP port 21025 and reachability
Starbound’s standard game port is TCP 21025. The host computer’s firewall must allow the dedicated server to receive connections on that port. For a home-hosted server, the router must forward TCP 21025 to the computer running Starbound, and the host’s local firewall must permit the same traffic.
Port forwarding is unnecessary when every player is on the same local network and can reach the host’s private address, but remote friends need a route from the internet to the server. Testing from inside the same network can give a false impression that remote access works, so perform one test from an outside connection.
If you deliberately changed the listening port in your installation, tell friends the corresponding address and port. Older hosted-server instructions list 21025, 21026, and 21027 for different services or instances; those numbers do not mean every current installation should expose all three. Open and forward only the port your running server configuration uses.
Use a fixed internal address or a router reservation for the host when possible, so forwarding does not point to a different computer after a reboot. The important check is that the forwarding destination matches the machine currently running Starbound.
Current account-bound settings versus the legacy password array
The two formats are not interchangeable. Use this comparison to identify which instructions apply to your files:
| Characteristic | Current generated configuration | Older hosted-server instructions |
|---|---|---|
| Primary file | storage/starbound_server.config, created after the dedicated server runs |
default_configuration.config |
| Authentication key | serverUsers with named accounts, passwords, and an admin flag |
serverPasswords array |
| Privilege separation | Separate normal-player and administrator entries are supported | Not established by the older password-array example |
| Port figures in the cited tutorial | TCP 21025 is the standard game port | 2013-11-29 tutorial lists 21025, 21026, and 21027 |
| Best use | Prefer when the generated file supports it | Use only when your installed version actually exposes this format |
If a tutorial tells you to edit serverPasswords but your generated file contains serverUsers, the tutorial is describing a different configuration model. Do not add both formats hoping one will take precedence; identify the keys your executable generated and use that model. A key that is ignored is not a secure fallback because anonymous access may remain enabled.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Configuration details worth checking
| Setting or fact | What it controls | Practical implication |
|---|---|---|
serverUsers |
Named account credentials and privilege flags | Create at least one admin:false account for friends; reserve admin:true for trusted operators. |
allowAnonymousConnections |
Whether accounts can connect without authentication | Set to false when every connection must supply a configured account and password. |
| TCP 21025 | Standard Starbound game port | Allow it through the host firewall and forward it on the router when remote access is required. |
| Maximum simultaneous sessions | The documented default capacity is 8 players | Do not promise more than the server configuration and available resources can support; check the generated settings before changing limits. |
The default maximum of eight simultaneous sessions is a capacity setting, not a password setting. A private server can still fill all available slots, so password protection does not increase the supported player count. If you plan a larger group, check the generated configuration and the machine’s ability to run the server before advertising additional places.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Troubleshooting by symptom
The server starts, but friends can join without a password
Check allowAnonymousConnections first. It must be the JSON Boolean false, not the string "false". Then verify that you edited the configuration in the running server’s own storage directory and restarted after saving. If the server regenerated the file, your edit was invalid or was made in the wrong location.
The server asks for credentials, but the login is rejected
Confirm the exact account spelling and capitalization, then use the password belonging to that account. Make sure the account object has both a password and an admin value. Reopen the file after stopping the server to verify that your changes survived the restart. Do not substitute a Steam display name unless it is also the account name you configured.
Recommended Free Tools
The file became starbound_server.config.old
That filename indicates a syntax failure was detected during startup. Stop the server, copy the .old file somewhere safe, and restore your known-good backup. Reapply the smallest possible change, checking braces and commas before restarting. Do not edit the newly generated default and assume it still contains your accounts.
Local testing works, but remote friends time out
The credentials are probably valid; investigate reachability. Confirm that the server is listening on TCP 21025, the operating-system firewall permits it, and the router forwards that port to the correct internal IP address. A friend must use the externally reachable address or DNS name. Testing from a different network avoids the common mistake of testing a router’s internal path from inside the same network.
Friends see the server but cannot use administrator commands
Give them the normal account unless they genuinely need administrative control. Only an entry with "admin" : true receives administrator privileges. If you changed the flag, restart the server and have the client reconnect so the new permissions are applied.
The guide I found mentions only serverPasswords
That guide is likely based on the older default_configuration.config format. Inspect the file generated by your server. When serverUsers is available, use it instead of copying the legacy array. If your installation truly generates only the older format, follow its matching documentation and keep a backup before changing it.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The password works for one person but not another
Check whether both people are using the same account name and password exactly as configured. Account entries are independent, so changing one password does not change another. If you created separate accounts, verify that each account has its own complete object and that commas separate the objects correctly.
I changed the password, but an old password still works
Stop and restart the dedicated server after saving the file, then reconnect the client. Confirm that you changed the file in the active instance’s storage directory and did not leave a duplicate server process running with the previous configuration. Share the replacement password privately after verifying the new login.
Security and maintenance checklist
- Keep the administrator account separate from the account shared with friends.
- Use unique passwords and replace them when someone who knew them should no longer connect.
- Share the ordinary player credentials privately; posting them with the server address makes the server effectively public to anyone who sees the post.
- Back up the working configuration before changing passwords, ports, or other settings.
- After every edit, confirm that
allowAnonymousConnectionsis stillfalseand that the server starts without regenerating the file. - Expose only the required game port. The older list of 21025, 21026, and 21027 is not a requirement to forward all three on a current installation.
- Review who has administrator access whenever the group of players changes.
- Remove or replace credentials promptly when a player should no longer connect.
- Keep a known-good backup before upgrading, moving, or creating another server instance.
Home hosting or managed infrastructure?
Running the server at home gives you direct control over the configuration, but you must maintain port forwarding, firewall rules, the host computer, and uptime. Managed Starbound server hosting can handle much of that infrastructure, but you still need to confirm that the provider supports your Starbound version, exposes the configuration keys you need, provides backups, and allows account-bound passwords.
There is no single hosting price or hardware requirement that applies to every setup. Home hosting may use a computer you already operate, while managed services charge according to their current plans and included resources. Compare the actual monthly price, backup policy, supported version, configuration-file access, player capacity, and port controls before choosing a provider. Do not pay for a service that cannot expose serverUsers or disable anonymous connections when password-only access is your goal.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesIn either environment, the authentication steps remain the same when the server supports serverUsers. A managed host may replace manual router forwarding, but it does not eliminate the need to give friends the correct address, account, and password.
Final verification
A correctly private server has all of these properties: the dedicated server runs from the configuration it generated; serverUsers contains a normal player credential and, if needed, a separate administrator credential; allowAnonymousConnections is false; the file remains valid after restart; a local client can authenticate; and a remote client can reach the host through TCP 21025. Once those checks pass, friends need only the server address, their account name, and the matching password.
Frequently Asked Questions
Where is Starbound’s password configuration file?
For a current dedicated server, run it once, stop it, and edit storage/starbound_server.config inside that server installation. The exact parent directory depends on where you installed the server.
How do I make the server reject anonymous players?
Set allowAnonymousConnections to the JSON Boolean false, then save valid JSON and restart. Leaving it at true can allow connections without a configured account.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Should I use serverUsers or serverPasswords?
Use the format generated by your installed server. Current configurations commonly use account-bound serverUsers; older tutorials use a serverPasswords array in default_configuration.config. Do not combine both formats.
Can friends use their Steam names as the login?
Only if you created matching names under serverUsers. The configured account name is a server credential and does not have to be a player’s Steam display name.
Can I give friends administrator access?
Yes, but only entries with "admin" : true receive administrator privileges. Give friends an admin:false account unless they genuinely need server commands.
Why did Starbound create starbound_server.config.old?
The server detected a syntax error while starting. Restore your known-good backup, then reapply the edit while checking braces, quotation marks, colons, and commas.
What port must I forward for remote friends?
The standard Starbound game port is TCP 21025. Allow it through the host firewall and forward it to the server computer when hosting behind a home router. If you changed the port, use the one in your active configuration.
How do friends join after I enable the password?
They open Multiplayer, enter the server IP address or DNS name, enter the configured account name and password, and select Join Server. Remote players must use an externally reachable address.
The Bottom Line
Run the server once, edit its generated storage/starbound_server.config, add separate serverUsers credentials, set allowAnonymousConnections to false, and restart. Test with 127.0.0.1, then verify TCP 21025, firewall access, and router forwarding for remote friends. Share only the normal player login.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
