To make an Assetto Corsa dedicated server private, stop the server, open cfg/server_cfg.ini, and edit the existing entries in the [SERVER] section:
Playing with friends? Godlike.Host runs hosted Assetto Corsa servers from 10 data-center locations, with free DDoS protection.
PASSWORD=choose-a-unique-game-password
REGISTER_TO_LOBBY=0
Save the file and restart the server. The non-empty PASSWORD prevents people without the join credential from entering. REGISTER_TO_LOBBY=0 removes the server from the public lobby. If friends should be able to discover it in the lobby, use REGISTER_TO_LOBBY=1 and keep the password enabled. Unlisted mode reduces discovery; it does not replace a password.
As an Amazon Associate I earn from qualifying purchases.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →What “private” means in Assetto Corsa
Assetto Corsa privacy has two separate controls: authorization and discoverability. Authorization determines whether a driver may enter. Discoverability determines whether the server is advertised in the public lobby.
- Password-protected: Drivers must enter the game join password before they can join.
- Unlisted: The server is not registered in the public lobby, so it is harder for strangers to find.
- Private and unlisted: A password is required and
REGISTER_TO_LOBBY=0hides the server from the public listing. This is the usual choice for a friends-only event. - Listed but restricted: A password is required while
REGISTER_TO_LOBBY=1leaves the server visible so invited friends can find it more easily.
Hiding a server does not stop someone who already has its direct connection details from trying to join. The password is the actual join restriction, so use both settings when you want a server that is difficult to discover and limited to an invited group.
#1 Best Overall
- Assetto Corsa features an advanced DirectX 11 graphics engine that recreates an immersive environment, dynamic lighthing and realistic materials and surfaces.
- Extremely detailed with single player and multiplayer options, exclusive licensed cars reproduced with the best accuracy possible, thanks to the official cooperation of Car Manufacturers.
- ASSETTO CORSA has been developed at the KUNOS Simulazioni R&D office, located just inside the international racing circuit of Vallelunga, allowing the team to develop the game with the cooperation of real world racing drivers and racing teams.
Settings that control privacy and access
| Setting or file | What it controls | How to use it |
|---|---|---|
PASSWORD |
The credential required from players when they join. | Set a non-empty, unique value. Change it if it is shared beyond the intended group. |
REGISTER_TO_LOBBY=0 |
Public-lobby registration. | Use it when the server should be unlisted and invitations will be sent directly. |
REGISTER_TO_LOBBY=1 |
Public-lobby registration. | Use it when friends should find the server in the lobby while unauthorized drivers still face the password. |
ADMIN_PASSWORD |
Administrative commands and server management. | Keep it separate from the player join password. Ordinary drivers do not need it. |
entry_list.ini |
Configured cars, slots and entry-list constraints. | Check that invited drivers have a compatible, available slot. |
LOCKED_ENTRY_LIST |
Whether the configured entry list is enforced by the server setup. | Enable or retain it only after the intended cars and slot assignments are ready. |
Edit the existing keys rather than adding duplicate lines. Duplicate entries can make it unclear which value the server process or a hosting panel will apply.
Prepare the server before changing privacy
Finish the event configuration first
Set the track, cars, sessions, weather, rules and client capacity before you lock down access. Privacy settings do not correct an incomplete event configuration, and changing the entry list after drivers have been invited can create a separate joining problem.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Know where the configuration lives
On a self-hosted installation, server_cfg.ini is inside the server’s cfg directory. On managed hosting, a control panel commonly provides a file editor and restart controls. The labels vary by provider, but the file and section are the same places to check.
Keep credentials separate
Choose one credential for players and a different, stronger credential for administration. Friends need only the game join password. They should not receive your hosting-panel login, SFTP password or ADMIN_PASSWORD unless you deliberately intend to delegate server administration.
Make a copy before editing
Save a backup of the current server_cfg.ini and, if you are changing the grid, entry_list.ini. A backup gives you a known-good configuration to restore if a panel regenerates a file or an edit introduces a syntax problem.
Choose the right privacy mode
| Goal | PASSWORD |
REGISTER_TO_LOBBY |
Best for |
|---|---|---|---|
| Maximum practical privacy | Non-empty | 0 |
Friends-only races where you will send direct join details. |
| Easy discovery for invited friends | Non-empty | 1 |
Groups that prefer searching the lobby instead of exchanging a direct address. |
| No access restriction | Empty or absent | Either value | Not recommended for a private event. |
The second row is still a restricted server: listing controls visibility, while the password controls authorization. The first row is not completely unreachable; anyone who obtains the direct connection details can still attempt to connect, but the password remains required.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchStep-by-step: password-protect and hide the server
1. Stop the dedicated server cleanly
Use the server application’s stop command or the hosting panel’s stop control. Do not edit while the process is running. A live process can retain an older in-memory configuration or write its current values back to disk, undoing your changes.
2. Open server_cfg.ini
Browse to the server’s cfg directory and open server_cfg.ini in the panel editor or a plain-text editor. If the file is not where expected, verify that you are editing the active server instance rather than a backup, template or different installation.
3. Edit the existing keys in [SERVER]
Find the [SERVER] section. Replace the value on the existing PASSWORD line with a non-empty game password. For a completely unlisted server, set the existing lobby-registration line to 0:
Rank #2
- Assetto Corsa features an advanced DirectX 11 graphics engine that recreates an immersive environment, dynamic lighthing and realistic materials and surfaces.
- Extremely detailed with single player and multiplayer options, exclusive licensed cars reproduced with the best accuracy possible, thanks to the official cooperation of Car Manufacturers.
- ASSETTO CORSA has been developed at the KUNOS Simulazioni R&D office, located just inside the international racing circuit of Vallelunga, allowing the team to develop the game with the cooperation of real world racing drivers and racing teams.
[SERVER]
PASSWORD=choose-a-unique-game-password
REGISTER_TO_LOBBY=0
Preserve the rest of the section. Do not place these keys in another section, and do not create a second PASSWORD or REGISTER_TO_LOBBY line.
Free tools Windows power users keep installed
One-click scans. No signup required.
4. Choose whether friends should see the server in the lobby
Use REGISTER_TO_LOBBY=0 when invitations will include a direct join method and you do not want the server listed publicly. Use REGISTER_TO_LOBBY=1 when convenience matters more than hiding the listing. In either case, leave the non-empty player password in place.
5. Save the file and restart
Save the file using the panel’s save action or the editor’s normal save command. Start the server again and wait for it to finish loading before testing. Some managed panels reapply a template during deployment; if your change disappears, edit the configuration in the panel’s designated server-file workflow and redeploy.
6. Check the entry list and capacity
Open entry_list.ini and verify that the event has the cars and slots your invited drivers are expected to use. A full client limit, an unavailable slot, an incompatible car or an enforced locked entry list can prevent a driver from joining even when the password is correct. Those are access-capacity or content issues, not failures of the privacy setting.
7. Test with two accounts or drivers
- Attempt to join with an intentionally incorrect password. The attempt should be rejected.
- Join with the correct password and a car permitted by the entry list. The driver should enter normally if a client slot is available.
- When using
REGISTER_TO_LOBBY=0, search the public lobby and confirm that the server is absent. - Send the direct connection method and the current game password privately to the intended drivers.
Testing both a failed and successful authentication path catches the most common mistakes: editing the wrong file, saving in the wrong section, restarting the wrong instance or distributing an outdated password.
Recommended Free Tools
How to invite drivers without exposing the server
For an unlisted setup, an invitation needs two separate pieces of information: the direct connection method used by your deployment and the player join password. Send both through a private group message or another channel limited to participants. Do not put the password in a public lobby title, open forum post, livestream overlay or screenshot of server_cfg.ini.
Tell drivers which car choices are available if the entry list is constrained. A password can be correct while a driver is still refused because every suitable slot is occupied, the selected car is not configured, or the client is missing the required track or car content. Giving those details in the invitation reduces last-minute troubleshooting.
If you use a listed server with REGISTER_TO_LOBBY=1, include the exact server name or search terms as well as the password. Listing makes discovery easier, but it does not make the password optional.
Choosing and handling the player password
Use a password that is unique to this server
Do not reuse an email, hosting-panel or administrator password. The game password is shared with every invited driver, so it should be safe to disclose to that group without granting access to anything else. A phrase with several unrelated words and numbers is easier to distribute accurately than a short, ambiguous string.
Rank #3
- Assetto Corsa Competizione is designed to faithfully recreate the performance and the driving experience of real Blancpain GT Series cars through a sophisticated mathematical model that accurately replicates tyre grip, aerodynamic impact, engine parameters, suspensions and electronics systems that determine vehicle balance, as well as the influence of mechanical damage on the car's drivability.
- Unreal Engine 4 guarantees photorealistic rendering and an accurate representation of scenarios, car materials and weather conditions. Thanks to the multi-channel audio sampling of real GT cars, the game conveys captivating and immersive acoustic surroundings and realistic environmental effects.
- Even the secondary details are faithfully reproduced to make you feel the thrill of being in the cockpit of a real racing car. Doors, windshield wipers, headlights, racing lights, racing equipment and control devices such as ABS, traction control, engine ignition and ECU mapping, are all under the driver’s management to assure the best performance and offer the player total control of the car.
- Thanks to Laserscan technology, every official circuit is recreated with the utmost accuracy: all curbs and details perfectly fit their real counterparts to grant a gaming experience as faithful to reality as possible.
- A well-structured ranking system will evaluate individual performance and driving behaviour to reward the most virtuous drivers and promote fair play in online competitions. The matchmaking function makes sure that you can compete with opponents of similar skill level and easily find online races to join, while the leaderboards will allow you to compare single-lap performance with virtual pilots from around the world with the same car, circuit and weather conditions.
Distribute it through the same private channel as the invitation
Send the join password only to the drivers who should participate. Avoid posting it in a public lobby chat, open forum or stream overlay. If you share a screenshot of the server configuration, remove the password first.
Rotate it when membership changes
If the password reaches an unintended audience, stop the server, replace the PASSWORD value, save and restart. Give the replacement only to the current group. Rotating the join password does not require changing ADMIN_PASSWORD unless administrative access was also exposed.
Do not confuse player and administrator credentials
PASSWORD is the credential drivers enter to join the session. ADMIN_PASSWORD is for administrative commands. Giving an ordinary participant the administrator credential grants more control than is needed for racing and makes a leaked player invitation more serious.
Self-hosted and managed-server differences
Self-hosting at home or on your own machine
The privacy settings are still stored in server_cfg.ini, but connectivity becomes your responsibility. A home-hosted deployment may require you to allow the dedicated server through the operating-system firewall and forward the game and HTTP ports on the router. The exact port values depend on your installation and local configuration, so use the values already configured for that server rather than copying a port number from another setup.
After changing the password, restart the server process and confirm that the router and firewall rules still point to the active machine. A correct password cannot help a friend who cannot reach the server because a port or firewall rule is blocking the connection.
Managed hosting panels
A managed panel generally combines file editing, start/stop controls and deployment. Open the server’s file manager, edit server_cfg.ini, save it, then use the panel’s restart or redeploy action. Some services also accept server_cfg.ini and entry_list.ini as the files used to create a server, so upload or edit both when the panel’s workflow asks for them.
If the panel overwrites your change, identify whether it uses a template, startup profile or generated configuration. Apply the value in that source and restart from the panel instead of repeatedly editing a generated copy.
When managed hosting is worth considering
Managed hosting can be practical when you do not want to maintain a machine, router forwarding, firewall exceptions, uptime or manual restarts. The privacy workflow remains the same, but the provider supplies the control panel for editing files and restarting the process. Check that the service lets you edit both server_cfg.ini and entry_list.ini, and understand whether its deployment process regenerates either file.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Troubleshooting privacy and joining problems
No password prompt appears
- Stop the server completely.
- Reopen the active
cfg/server_cfg.ini. - Confirm that
PASSWORDhas a non-empty value inside[SERVER]. - Check that you did not edit a duplicate or inactive server instance.
- Save and restart. If a hosting panel regenerates the file, apply the change through its deployment or template workflow.
The server is still visible in the public lobby
Verify that the active file contains REGISTER_TO_LOBBY=0, save it and restart the correct server. Visibility can persist temporarily while a listing refreshes, so check again after the server has completed its restart. If the server remains listed, confirm that the panel did not restore REGISTER_TO_LOBBY=1 from a template.
Rank #4
- As with its predecessor, Assetto Corsa EVO will include cars from different classes spanning across years of motoring history. From road cars, classics, hypercars, and race cars. The most iconic representation of the automotive and motorsport world. Each vehicle is reproduced through Kunos in-house physics and graphic engine simulating mechanical, electronic, and aerodynamic performance, combined with the fidelity of the circuits created using Laserscan technology
- In Early Access 1 you will be able to experience a range of vehicles, tracks and game modes that will evolve on the road to our full 1.0 launch.
A friend sees the server but cannot join
Being able to see a listing proves only that the server is discoverable; it does not prove that the join credentials, content or grid are valid. Check the following in order:
- Confirm that the friend copied the current game
PASSWORDexactly, including capitalization and punctuation. - Confirm that the client has the same required car and track content as the server.
- Check
entry_list.inifor a compatible, unclaimed slot. - Check the configured client capacity for an available place.
- If
LOCKED_ENTRY_LISTis being enforced, verify that the driver’s selected car and slot match the locked configuration.
A friend cannot find an unlisted server
That is expected with REGISTER_TO_LOBBY=0. Send the direct join method used by your deployment and the current game password privately. If you want the group to locate the server through the lobby instead, change the value to REGISTER_TO_LOBBY=1, save and restart; keep the password in place.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsThe password was leaked
Stop the server, rotate the player PASSWORD, save and restart. Distribute the replacement only to the intended drivers. Do not solve a leaked player password by handing out ADMIN_PASSWORD; that credential must remain restricted.
Administrative access is confused with joining access
A driver who only needs to race should receive the game join password, not ADMIN_PASSWORD. If someone cannot join, recheck the player password and entry-list conditions rather than changing administrative credentials.
The server disappears after a restart
First confirm that the process actually started and completed loading. Then inspect the active configuration rather than a saved backup. On a home deployment, check firewall and router rules; on a managed deployment, check whether a template or startup profile replaced the file. An unlisted server will not appear in the public lobby by design, so use the direct connection method when testing it.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Privacy configurations for common events
Friends-only, fully unlisted race
Set a unique non-empty PASSWORD and use REGISTER_TO_LOBBY=0. Confirm the entry list and client capacity, then distribute the direct join details and password through a private channel. This minimizes public discovery while retaining an explicit join barrier.
Friends-only race that should be easy to find
Set the non-empty player password and use REGISTER_TO_LOBBY=1. Friends can search the lobby, but a driver who does not know the password still cannot enter. This is useful when a group does not want to exchange a direct address for every event.
Temporary private practice session
Use the same password control even for a short practice server. When practice ends, stop the server or rotate the password before opening a later event to a different group. Leaving an old shared credential active can unintentionally carry access into the next session.
Organized grid with fixed assignments
Prepare entry_list.ini before distributing the invitation. If the list is locked, assign the intended cars and slots first, then test with a driver using one of those assignments. Privacy cannot override a locked list, an unavailable slot or the server’s client limit.
Best Value
- The Monte Carlo Rally is famous for unpredictable weather, featuring snow, ice, and dry asphalt. It tests drivers' skills and adaptability, making it one of the most challenging rallies in the world.
- This iconic location is being delivered as two fully laser-scanned stages, Col de Turini and Sisteron including fully dynamic weather conditions.
Operational checklist
- Event settings, cars, track, sessions and client capacity are complete.
- The dedicated server was stopped before editing.
- The active
cfg/server_cfg.iniwas edited, not a template or backup. PASSWORDis non-empty and unique to this server.REGISTER_TO_LOBBYmatches the intended discoverability:0for unlisted,1for listed.ADMIN_PASSWORDis separate and not distributed to ordinary drivers.- The file was saved and the correct server instance restarted.
entry_list.ini, locked-list behavior and available client slots were checked.- An incorrect-password attempt was rejected.
- A permitted driver joined with the correct password.
- For an unlisted setup, the server was confirmed absent from the public lobby.
- The current join details were sent only to the intended group.
These checks separate privacy failures from unrelated content, capacity, network and credential problems. A password controls who may join; lobby registration controls how easily the server can be discovered.
Frequently Asked Questions
How do I password-protect an Assetto Corsa server?
Stop the server, open cfg/server_cfg.ini, set a non-empty PASSWORD under [SERVER], save the file and restart. Drivers then need that game join password.
How do I hide my Assetto Corsa server from the lobby?
Set REGISTER_TO_LOBBY=0 in the [SERVER] section, save and restart the active server. Send invited drivers the direct join method and password privately.
Can friends find a private server in the public lobby?
Yes. Keep a non-empty PASSWORD and set REGISTER_TO_LOBBY=1. The server remains listed, but only drivers with the join password should be able to enter.
What is the difference between PASSWORD and ADMIN_PASSWORD?
PASSWORD is the credential players use to join the race. ADMIN_PASSWORD authorizes administrative commands. Give ordinary drivers only the player password.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Why can a friend see the server but still not join?
Check the current password, matching car and track content, an available compatible slot in entry_list.ini, client capacity and any enforced LOCKED_ENTRY_LIST. These conditions are separate from lobby visibility.
What should I do if the password is leaked?
Stop the server, replace the player PASSWORD, save and restart, then send the replacement only to the intended group. Do not distribute ADMIN_PASSWORD as a workaround.
Why did my privacy setting disappear after editing a hosting panel?
The panel may regenerate files from a template, startup profile or deployment workflow. Apply the setting in that source, save it through the panel’s designated file editor and restart or redeploy the correct server instance.
Do I need router and firewall changes?
Self-hosted servers may require firewall permission and router forwarding for the configured game and HTTP ports. Managed hosting usually handles network availability, but you still edit server_cfg.ini and restart through its panel.
Free tools Windows power users keep installed
One-click scans. No signup required.
The Bottom Line
For a friends-only Assetto Corsa server, stop the process, set a unique non-empty PASSWORD in cfg/server_cfg.ini, set REGISTER_TO_LOBBY=0, save and restart. Keep ADMIN_PASSWORD private, verify entry_list.ini and available slots, then test both an incorrect and correct password. Use REGISTER_TO_LOBBY=1 instead when friends should discover the password-protected server through the public lobby.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

