Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
World desk8 min

How to Set Up a Whitelist on a Valheim Server

A complete guide to Valheim’s permittedlist.txt whitelist, including save paths, Platform User IDs, passwords, crossplay, launch options, and troubleshooting.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To whitelist a Valheim dedicated server, stop it, open the server’s active save directory, create permittedlist.txt, and put one exact, case-sensitive Platform User ID on each line. Save the file and restart the server. Anyone not listed will be refused, even if they know the password. The same file works for a self-hosted server; cross-platform clients additionally require the server to be launched with -crossplay.

What Valheim’s whitelist does

Valheim calls its whitelist a permittedlist.txt file. It is an allowlist: the accounts named in the file are permitted to connect, while other accounts are excluded. Iron Gate’s warning is explicit: “Please note that adding a person on the permitted list will ban everyone else from the server.” Treat the first entry as a switch from an open server to an exclusive one, not merely as an additional invitation.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The list is separate from the other permission files in the same save area:

File Purpose What belongs in it
permittedlist.txt Allows only listed accounts to connect One Platform User ID per line
bannedlist.txt Blocks listed players Platform User IDs for accounts you want blocked
adminlist.txt Grants administrative privileges Platform User IDs for trusted administrators

Do not substitute a display name, a Steam profile URL, or an IP address for the Platform User ID expected by the server. The ID uses the platform-prefixed format documented by Iron Gate and is case sensitive. Copy it exactly, including capitalization and punctuation.

#1 Best Overall
Sale
TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black
  • [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
  • [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
  • [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
  • [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
  • [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

Before changing the file

Install and launch the dedicated server once

Install the Valheim Dedicated Server and launch it with the supplied startup script before editing permissions. The first run creates the save structure and confirms that the script points to the installation you intend to administer. If you change the script later, remember that a custom save location can change where the permission files live.

Stop the server cleanly

Shut the server down through its normal console or stop procedure and wait for it to finish saving. Editing while the process is running can leave you looking at an old file, or can allow a later save operation to overwrite your change. Never edit adminlist.txt when you mean to change access; the names are similar but the effects are different.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Find the active save directory

The whitelist must be in the save directory used by the running server, not simply in the folder containing the server executable.

Rank #2
Sale
Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)
  • 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
  • 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
  • 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
  • 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
  • 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

Windows default

Iron Gate documents the default Windows location as ../%USERPROFILE%/AppData/LocalLow/IronGate/Valheim. In File Explorer, expand the %USERPROFILE% portion to your Windows user profile and look for the IronGate/Valheim directory. If the server script includes -savedir, use that specified path instead of the default.

Linux default

The documented Linux location is ~/.config/unity3d/IronGate/Valheim. The tilde represents the home directory of the account that runs the server. If the service runs under a dedicated system account, check that account’s home directory rather than your personal login. A -savedir [PATH] argument overrides this location.

Confirm the path used by the script

Open the startup script and look for -savedir. The path following that option is authoritative. This check prevents the most common failure mode: creating a correctly named file in a directory the server never reads. Keep the path consistent between restarts; changing it can make an established world appear to have lost its permissions and saves when the server has actually opened a different directory.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord
  • [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
  • [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
  • [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
  • [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
  • [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

Create and edit permittedlist.txt

  1. Navigate to the active save directory identified above.
  2. Create a plain-text file named exactly permittedlist.txt. If it already exists, open it with a plain-text editor.
  3. Enter one Platform User ID per line. Do not separate IDs with commas, spaces, or semicolons.
  4. Preserve every letter’s capitalization and the platform prefix exactly as shown by Valheim.
  5. Save the file as plain text, then close the editor before restarting the server.

On Windows, enable file-name extensions in File Explorer while checking the name. This makes an accidental permittedlist.txt.txt visible. On Linux, a typical workflow is to change to the active directory and open the file with a text editor such as nano permittedlist.txt; the important requirements are the directory, exact filename, and plain-text content, not the choice of editor.

Get a player’s Platform User ID

Ask the player to connect while the server is available, then read the ID from the server log or use the in-game F2 panel. Copy the complete platform-prefixed value shown there. A player’s visible name can change, and two people can use similar names, so it is not a reliable substitute.

IDs are case sensitive. If a copied value contains uppercase characters, changing them to lowercase can make the entry fail even though the digits and punctuation look correct. Put each copied value on its own line and avoid leading or trailing spaces.

Rank #4
BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees
  • Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
  • Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
  • All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
  • Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
  • Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

Apply the whitelist

  1. Verify that the server process is stopped and that permittedlist.txt is in the directory selected by the active startup script.
  2. Save the file and check its spelling, extension, line breaks, and ID capitalization.
  3. Start the dedicated server again with the same script and world settings.
  4. Have one listed player attempt to join using the required password and connection mode.
  5. Have an account that is not listed attempt to join. The server should reject that account once the permitted list is active.

Do not describe the test as successful until the operator has actually performed both connection checks. A server that starts without an error can still be reading a different save directory or a differently named file.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Password and whitelist checks are separate

The password configured with -password is independent of the permitted list. A listed player may still need the server password, and knowing the password does not let an unlisted account bypass the allowlist. Give approved players both pieces of information when appropriate, and troubleshoot them separately: first confirm that the account is listed, then confirm that the password being entered matches the server’s current launch configuration.

Allow Xbox and Microsoft Store players with crossplay

For Xbox or Microsoft Store clients, add -crossplay to the dedicated-server launch command. Iron Gate’s FAQ states that Xbox players can join a dedicated server when crossplay is enabled; an Xbox console cannot host a dedicated server itself. Crossplay changes the connection path, so follow the current official guide for the server version you are running when configuring discovery, forwarding, or join instructions.

Crossplay does not replace the whitelist. A cross-platform player still needs a matching Platform User ID in permittedlist.txt, and may also need the server password. Make sure the client is using the connection mode expected by the server before treating a rejection as a whitelist error.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Relevant startup options and network settings

The whitelist is a file-based setting, but the launch script determines which world, save directory, and connection mode the server uses.

Option Role in a whitelisted server
-name Sets the server name players see.
-world Selects the world to load. Keep it unchanged when applying a whitelist to an existing world.
-password Sets the separate password that approved players may still need.
-public Controls whether the server is advertised publicly; it does not turn the permitted list on or off.
-savedir [PATH] Moves saves and permission files to the specified directory. The whitelist must be created there.
-crossplay Enables the crossplay connection path required for Xbox and Microsoft Store clients.
Backup options Control scheduled or retained backups documented by Iron Gate; they do not edit the permitted list.

Iron Gate documents default ports 2456 and 2457: the server uses the port you specify and the following port. If you change the base port in the script, apply the corresponding firewall and router rules for that pair. Crossplay can alter how clients reach the server, so use the current guide for version-specific networking details rather than assuming a setup for direct PC connections applies unchanged.

Troubleshoot a player who cannot join

The file is ignored

  • Confirm the filename is exactly permittedlist.txt, with no hidden second extension such as .txt.txt.
  • Check that the file is in the active save directory, including any path supplied by -savedir.
  • Stop and restart the server after saving; changing the file while the process is running is not a substitute for a restart.
  • Ensure the editor saved a plain-text file rather than a word-processing document.

The listed ID is rejected

  • Obtain the value again from the server log or the in-game F2 panel and compare every character.
  • Use the complete platform-prefixed ID, not a display name, profile URL, or IP address.
  • Restore the original capitalization and remove accidental spaces or blank characters.
  • Check that the player is connecting to the same server instance and world whose save directory you edited.

The player is still refused after the ID is correct

  • Confirm that the server was restarted after the edit.
  • Check the password separately; whitelist approval does not supply the password.
  • If the player is on Xbox or Microsoft Store, verify that the launch script includes -crossplay and that the client is using the appropriate cross-platform route.
  • Make sure you edited permittedlist.txt, not bannedlist.txt or adminlist.txt.

An administrator can no longer manage the server

Whitelist membership and administrator status are different. An account that should retain console privileges must remain in adminlist.txt; adding it to permittedlist.txt only controls whether it may connect. Review both files independently before changing either one.

Self-hosting versus managed hosting

The file format and ID rules do not change because a provider supplies the machine, but the practical work does. Use these criteria when deciding where to run a whitelisted server:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Consideration Self-hosted server Managed hosting
Save and permission-file control Direct access to the operating system, startup script, and save directory. Usually mediated by a control panel or file manager; confirm that it permits editing permittedlist.txt.
Operating system and firewall You install updates, open the required ports, and diagnose firewall or router issues. The provider may handle the host network, while you still configure the server instance and account permissions.
Crossplay configuration You add -crossplay and apply the version-appropriate networking settings yourself. Look for a launch-argument or crossplay toggle and verify what it changes before enabling it.
Backups and restore You configure and test the documented backup options and keep copies of the save directory. Check retention, download access, restore procedure, and whether permission files are included.
Uptime and maintenance Power, operating-system updates, and restarts are your responsibility. The service may provide monitoring and restart tools, subject to its plan and policies.
Geographic latency You choose the machine’s location. Choose a region near the players and verify that the offered location meets your needs.
Price Depends on hardware, electricity, network service, and your time. Depends on the provider, region, resources, and billing term; compare the complete recurring cost.
Log access Full access to server logs, including IDs useful for populating the list. Confirm that logs can be viewed or downloaded when you need to identify a player.

Official documentation explains the self-hosted configuration but does not endorse a particular hosting company. Regardless of platform, retain a copy of the world and permission files before making major changes.

Operational checklist

  • Dedicated server installed and launched with the intended startup script.
  • Server stopped cleanly before file editing.
  • Active save directory confirmed, including any -savedir override.
  • File named exactly permittedlist.txt.
  • One complete, case-sensitive Platform User ID on each line.
  • No display names, profile URLs, IP addresses, commas, or hidden extensions.
  • Server restarted after saving.
  • Listed player tested with the correct password and connection mode.
  • Unlisted account tested and rejected.
  • -crossplay enabled when Xbox or Microsoft Store clients must connect.
  • adminlist.txt maintained separately for administrative access.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.