How to Set Up RCON on a DayZ Server

To set up RCON on a DayZ server, create BEServer_x64.cfg in the BattlEye directory that the server actually uses, add a unique RConPassword and an unused RConPort, restart the server, allow inbound UDP on that port, and connect with a BattlEye-compatible RCon client. The most common failures are editing the wrong BattlEye folder, opening TCP instead of UDP, reusing a game-server port, or confusing passwordAdmin with RConPassword.

Playing with friends? Godlike.Host runs hosted DayZ servers from 10 data-center locations, with free DDoS protection.

What DayZ RCON is and what it controls

DayZ RCON is BattlEye’s remote-console interface. It lets an external administration tool send BattlEye commands to a running server without logging in through the game client. The connection is separate from the in-game administrator login and uses its own password and network port.

#	Preview	Product	Price
1		TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for...	$13.98	Buy on Amazon
2		Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen...	$17.99	Buy on Amazon
3		New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord	$8.99	Buy on Amazon
4		BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees	$199.99	Buy on Amazon
5		Pokemon FireRed and LeafGreen Strategy Guidebook: Affordable & Unofficial Strategy Guide...	$19.98	Buy on Amazon

As an Amazon Associate I earn from qualifying purchases.

RCON and passwordAdmin are different credentials

passwordAdmin belongs in serverDZ.cfg and authenticates the in-game administrator interface. RConPassword belongs in the BattlEye configuration file and authenticates an external RCon tool such as a desktop client or hosted administration service. Changing one does not change the other.

RCON uses a separate UDP endpoint

BattlEye RCon is UDP-based. Its port must be different from every DayZ game-server port. The example below uses UDP port 2305; that number is only an example, so choose a free port appropriate for your host and network policy.

#1 Best Overall

Sale

TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black

• [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
• [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
• [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
• [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
• [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.

$13.98

Buy on Amazon

Requirements before you begin

• File-system or control-panel access to the DayZ server installation.
• Permission to restart the server.
• The public IP address or DNS hostname that RCon clients can reach.
• A UDP port that is free and does not overlap any DayZ game-server port.
• Access to the host firewall, cloud security group, and any upstream firewall or router.
• A BattlEye-compatible RCon client or a hosted administration service.

Record the current startup parameters before changing files. In particular, note any -bePath or -profiles argument. Those parameters can move BattlEye files away from the directory you would otherwise expect.

Find the BattlEye directory the server actually uses

The correct configuration file is beside BEServer_x64.dll in the active BattlEye working directory. Bohemia Interactive’s DayZ configuration documentation identifies this location and notes that -bePath and -profiles can alter it.

Windows installations

1. Stop the DayZ server or use the provider’s file manager while it is offline.
2. Inspect the server’s launch command, shortcut, service definition, or provider startup field for -bePath and -profiles.
3. Open the directory selected by those arguments. If neither is present, search the server installation for BEServer_x64.dll.
4. Use the folder containing that DLL as the BattlEye working directory. The configuration file should be named exactly BEServer_x64.cfg.

Linux installations

1. Check the systemd unit, shell script, container definition, or hosting panel startup command for -bePath and -profiles.
2. Locate BEServer_x64.dll or the BattlEye directory selected by the startup parameters.
3. Create or edit the configuration file in that directory. Linux documentation commonly shows the lowercase filename beserver_x64.cfg; preserve the exact spelling and case expected by your server package.
4. Ensure the account running DayZ can read the file and that the file is not saved with a hidden .txt extension.

If a provider exposes several profile or BattlEye folders, the active one is the folder used by the running process, not necessarily the folder with the newest timestamp. Editing an inactive copy produces no RCon change after restart.

Create or edit the BattlEye RCon configuration

Open the active file in a plain-text editor. Add the two required directives on separate lines:

RConPassword A-long-unique-password
RConPort 2305

Choose the password

Use a password that is unique to this server and is not used for the operating-system account, control panel, database, or in-game administrator login. BattleMetrics reported a maximum length of 32 characters for DayZ and ArmA RCon passwords in 2024. Stay within that limit to avoid client or server rejection. Store the value in a password manager and do not paste it into public chat, issue trackers, or screenshots.

Rank #2

Sale

Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)

• 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
• 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
• 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
• 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
• 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.

$17.99

Buy on Amazon

Choose the port

RConPort selects the UDP listener. Confirm that the number is not assigned to any DayZ game port, another service, or another server on the same host. On a multi-server machine, give each instance a distinct RCon port and map each port to the correct process in the firewall and provider panel.

The BattlEye documentation describes both RConPassword and RConPort as required, and specifically says the RCon port must differ from the game server’s port or ports.

Leave RConIP unset in the normal case

RConIP is optional. Do not add it merely because a template contains the setting. A binding can make the listener available only on one interface. BattleMetrics warns that a specified address must be a reachable public address, not a private RFC1918 address such as 192.168.x.x or 10.x.x.x, and not a loopback address such as 127.0.0.1. For a typical single-interface server, deleting the line is safer than guessing.

Review RestrictRCon if commands fail

If the file contains RestrictRCon 1, BattlEye restrictions can block actions such as kicking, banning, or other connection restrictions. Leave the setting aligned with your moderation policy, but check it when a client authenticates successfully and specific moderation commands are unavailable.

Keep the file syntax simple

• Use one directive and value per line.
• Spell the names exactly: RConPassword and RConPort.
• Do not wrap the password in quotation marks unless your server package explicitly requires that syntax.
• Remove a duplicate directive elsewhere in the same file; conflicting entries make troubleshooting harder.
• Save as plain text, not rich text, and preserve the filename’s extension.

Restart DayZ and verify that BattlEye loaded the file

1. Save the file in the active BattlEye directory.
2. Stop the DayZ server completely. A restart of only an RCon client does not reload BattlEye settings.
3. Start the server with the same -bePath and -profiles parameters you inspected earlier.
4. Wait until the server is fully running, then inspect the startup or BattlEye log for errors about the configuration file, password, port, or address binding.
5. From an external network, enter the server’s public IP address or hostname, the configured UDP RCon port, and the RCon password in your client.

Use an external connection for the first test when possible. Testing from the same machine can succeed through a local interface even when the public firewall path is misconfigured.

Rank #3

New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord

• [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
• [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
• [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
• [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
• [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by

$8.99

Buy on Amazon

Open the RCon port through every firewall layer

Allow inbound UDP, not just TCP, on the exact value in RConPort. A successful DayZ game connection does not prove that the RCon port is reachable; the two services can use different ports and firewall rules.

Host firewall

Create an inbound rule for the selected UDP port on the operating system. If your host runs multiple DayZ instances, scope the rule to the intended port range or individual ports rather than opening an unrelated broad range.

Cloud security group or provider firewall

Many virtual servers have a second firewall outside the operating system. Add an inbound UDP rule there as well. Managed DayZ hosts may expose this as a “network,” “firewall,” or “additional ports” setting in their panel.

Router or upstream firewall

For a privately hosted server, forward the selected UDP port to the machine’s internal address and ensure the internal address does not change. If the server is behind carrier-grade NAT, ordinary port forwarding may not provide a publicly reachable endpoint; use a host or network arrangement that supplies one.

Use logs before changing unrelated settings

When a connection fails, check host and provider firewall logs for dropped packets on the RCon port. This distinguishes a network-path problem from a BattlEye authentication problem without altering unrelated DayZ gameplay settings.

Rank #4

BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees

• Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
• Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
• All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
• Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
• Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.

$199.99

Buy on Amazon

Connect with an RCon client

1. Install or open a client that supports BattlEye RCon.
2. Enter the public IP address or DNS hostname, not an internal address, unless the client is intentionally on the same private network.
3. Enter the exact UDP port from RConPort.
4. Enter the exact value from RConPassword.
5. Connect and run a harmless read-only command such as players to verify authentication.
6. Only after the connection works, test a moderation action in a controlled situation and confirm that your RestrictRCon policy permits it.

A hosted dashboard follows the same BattlEye credentials and port requirements, but the dashboard may connect from its own published IP ranges. If you restrict source addresses, allow the service’s documented ranges rather than your home IP.

Commands available through BattlEye RCon

BattlEye lists the following commands among its RCon capabilities. Exact syntax and permissions depend on the client and server version, so use the client’s command help where available.

Use loadBans and writeBans deliberately. A reload or write operation can replace the state you expected to preserve if another administrator has edited the ban file manually.

Troubleshoot a client that cannot connect

“Connection timed out”

• Confirm the client is using UDP and the exact configured port.
• Check the host firewall, cloud security group, router forwarding, and provider firewall.
• Verify that the public IP or DNS record points to the current server.
• Confirm the server process is running and listening after a full restart.
• Test from an external network and inspect firewall drop logs.

“Connection refused” or an immediate disconnect

• Confirm that BattlEye loaded the file from the directory selected by -bePath or -profiles.
• Check the exact filename: Windows commonly uses BEServer_x64.cfg, while Linux documentation commonly uses beserver_x64.cfg.
• Check capitalization and spelling of both required directives.
• Make sure another service is not occupying the selected port.
• Remove an unnecessary RConIP line that binds BattlEye to an unreachable interface.

“Bad password” or authentication failure

• Copy the password again from the active file, checking for an accidental trailing space.
• Confirm you changed RConPassword, not only passwordAdmin.
• Ensure the password stays within the 32-character DayZ/ArmA limit reported by BattleMetrics in 2024.
• Restart the server after changing the password; an RCon client reconnect does not reload server configuration.

Authentication works, but kick or ban commands do not

• Inspect RestrictRCon and any provider-level permission controls.
• Check that the client is sending the command to the intended server instance.
• Verify that the command syntax matches the client’s BattlEye implementation.
• Review the BattlEye and server logs for a rejected action rather than assuming the network is still at fault.

Only local connections work

This usually indicates an interface binding or perimeter-firewall problem. Remove RConIP unless you intentionally need a specific public interface, then verify external UDP access at every firewall layer. A private address or loopback value in RConIP will not be reachable from the internet.

The server starts but RCon disappears after an update

Recheck the startup command and BattlEye directory. Provider updates can change profile paths, recreate configuration folders, or switch between 32-bit and 64-bit BattlEye files. Find the directory beside the DLL used by the current process and reapply the settings there.

Best Value

Pokemon FireRed and LeafGreen Strategy Guidebook: Affordable & Unofficial Strategy Guide Walkthroughs

$19.98

Buy on Amazon

Choose a local client, dashboard, or managed service

The underlying BattlEye setup is the same, but the administration experience differs. Evaluate the options by connectivity, command coverage, auditability, access control, and support for more than one server. Commercial terms and included features change, so verify them with the provider before committing.

Even when a dashboard hides the UDP details, you still need a correct BattlEye password, an exposed RCon port, and a server that is using the intended configuration directory.

Security practices for a production server

• Use a dedicated RCon password and rotate it whenever an administrator leaves the team.
• Limit firewall source addresses when every administrator or service has a stable, documented IP range.
• Do not publish the password in launch scripts, screenshots, public repositories, or chat logs.
• Give operators the smallest practical set of permissions in the dashboard or hosting panel.
• Keep a change record for password rotations, port changes, ban-file edits, and changes to RestrictRCon.
• Back up ban data before using loadBans or writeBans during a moderation incident.
• After changing network rules, test from outside the server’s network rather than relying on a local success.

Protocol limitation to understand when handling large ban lists

BattleMetrics described a one-byte sequence-number limitation in BattlEye RCon in 2023. This is a protocol characteristic, not a DayZ setting. It can matter when a response, especially a very large ban-list response, exceeds what the sequence field can distinguish. If a large response appears truncated or inconsistent, use a narrower operation, manage the ban data in smaller batches, and consult the client’s documentation instead of changing unrelated server ports.

Copy-and-check reference

A minimal configuration should look like this, with your own password and a free UDP port:

RConPassword A-long-unique-password
RConPort 2305

• The file is in the BattlEye directory used by the running process.
• The filename and capitalization match the platform’s expected form.
• The RCon port is different from every DayZ game-server port.
• The host, cloud, and upstream firewalls allow inbound UDP on that port.
• No unnecessary or private-address RConIP line is present.
• The server was fully restarted after saving the file.
• The client uses the public address, configured UDP port, and RCon password.
• passwordAdmin has not been substituted for RConPassword.

The reliable setup pattern

RCon works when four things agree: BattlEye reads the right file, the file contains a valid password and a free port, every network layer permits UDP to that port, and the client uses the server’s public address with the RCon credentials. Start troubleshooting in that order. It isolates path, configuration, networking, and authentication errors without changing unrelated DayZ settings.

Quick Recap

SaleBestseller No. 1

TOZO A1 Wireless Earbuds Bluetooth 5.3 Light Weight in Ear Headphones | IPX5 Waterproof,2 Mics for AI Calls,Immersive Premium Sound Bass Headset with Charging Case,32 EQ via App Black

$13.98

SaleBestseller No. 2

Smart Watch for Men Women Compatible with iPhone Samsung Android Phone 1.69 inch Full Touch Screen IP68 Waterproof Bluetooh Fitness Tracker Heart Rate/Sleep Monitor (Black)

$17.99

Bestseller No. 3

New Bee Guitar Cable 10ft Electric Instrument Bass AMP Cord

[Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable

$8.99

Bestseller No. 4

BSIMB 15.6" Digital Family Calendar & Chore Chart, No Subscription Fees

$199.99

Bestseller No. 5

Pokemon FireRed and LeafGreen Strategy Guidebook: Affordable & Unofficial Strategy Guide Walkthroughs

$19.98

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.