Free tools Windows power users keep installed
One-click scans. No signup required.
Enable Rust’s WebRCON mode in the server launch options, assign an explicit RCON port, allow that port over TCP, then connect with a WebRCON client. Keep the listener behind a firewall, VPN, or administrator-only allow-list because the password is carried in the connection URL without encryption.
Prefer not to run the server on your own PC? Godlike.Host offers hosted Rust servers with free DDoS protection and up to three free backups a day.
What RCON does and what you need
RCON (remote console) lets an administrator send server-console commands without opening the game console locally. On a Rust server, the current recommended method is WebRCON, which uses a WebSocket connection. You need access to the server’s launch command or hosting control panel, permission to restart the server, and a client that supports WebRCON.
As an Amazon Associate I earn from qualifying purchases.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errors- Self-hosted server: you must be able to edit the startup command and create firewall rules.
- Managed server: the host may assign a non-standard RCON port, hide the listener, or require you to enable it in a panel. Use the host’s port list rather than assuming a default.
- Credentials: choose a long, unique password that is not used for the game panel, operating-system account, or any other service.
RCON is separate from administrator authentication inside the game. A player can be an in-game owner or moderator and still have no RCON access unless the RCON client has the correct endpoint and password.
Add the three required launch options
Append these options to the existing RustDedicated startup command:
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
+rcon.web 1 +rcon.password "CHANGE_THIS_TO_A_LONG_RANDOM_SECRET" +rcon.port 28016
The values have distinct jobs:
| Option | Purpose | What to enter |
|---|---|---|
+rcon.web 1 |
Selects the web (WebSocket) remote-connect method. | Use 1 to enable WebRCON. |
+rcon.password |
Sets the password accepted by the RCON listener. | Replace the example with a long, unique secret. An empty value makes RCON unusable and insecure. |
+rcon.port |
Chooses the TCP port used by RCON clients. | Set a port explicitly instead of relying on a presumed default. |
The official Rust server wiki shows the same three settings, with an example using port 28016 and a sample password that must be replaced. Keep the options in the command that your host actually executes; adding them to a different script will have no effect.
Recommended Free Tools
Quoting and password characters
Quote the password in a shell or panel field when the launch mechanism requires it. The quoting rules depend on whether the command is entered in a shell, a service definition, or a hosting panel. Do not paste a password containing an unmatched quote into a field that parses quotes itself.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
RustAdmin users sometimes see a red status bar when the password contains characters such as # or a double quote. If that happens, first confirm the password in the launch command, then test with a newly generated secret made from a long mix of letters, numbers, hyphens, and underscores. Change it again after diagnosing the parser; do not settle for a short or reused password.
Pick and document the RCON port
Rust documentation and community guides disagree about the default RCON port. The official wiki describes the default as the same as server.port, commonly 28015. Other guides describe 28016, one above a commonly used 28015 game port. Because the default is not reliable across versions and hosting arrangements, always set +rcon.port yourself and verify the port the running server actually listens on.
| Service | Transport | Typical value or rule | Firewall implication |
|---|---|---|---|
Rust game server (server.port) |
UDP | Often 28015, but configurable | Allow the configured game port over UDP for players. |
| Query port | UDP | Configured separately by the server or host | Allow it over UDP only when server-list or query functionality requires it. |
| RCON | TCP | The number assigned with +rcon.port |
Allow this exact port over TCP, preferably only from administrator addresses or a VPN. |
| Rust+ | TCP | Configured separately | Its TCP rule is independent of the RCON rule. |
A Rust deployment commonly uses four ports in total, but the numbers are not universal. Record the chosen RCON port beside the server address so every administrator and firewall rule uses the same value.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Restart the server and verify the listener
- Stop the Rust server cleanly through the service manager or hosting panel.
- Save the edited launch command and start the server again. Launch arguments are read at startup, so changing a panel field without restarting does not activate RCON.
- Inspect the startup log or host panel for the RCON listener and confirm that it reports the port you selected. If it reports a different port, use that actual value when configuring the firewall and client.
- Check that the game still starts on its intended UDP port. RCON being enabled does not replace the game-port rule.
- If the server fails to start, remove only the newly added options temporarily, start once to isolate the problem, and then re-add each option with valid syntax. Do not expose an unprotected production server while troubleshooting.
Open only the required firewall path
Create an inbound rule for the selected RCON port using TCP. Do not create a UDP-only rule: the game port and RCON use different protocols. Keep the existing UDP rule for server.port so players can connect.
- Find the server’s public address and the RCON port confirmed in the startup log.
- Add an inbound TCP rule for that port on the operating-system firewall, cloud security group, router, or host panel that controls the server.
- Restrict the rule’s source to your fixed administrator IP addresses or to the address range of your VPN whenever possible. A rule open to every Internet address exposes the login endpoint to password-guessing attempts.
- If the server is behind a router, forward the same TCP port to the server’s private address. Make sure the operating-system firewall and router rule agree on both the port and protocol.
- Test from outside the local network. A test from the server itself can succeed even when the public firewall or router is blocking remote administrators.
Do not treat WebRCON as an ordinary web page. It is a WebSocket service. Opening an HTTP page on the RCON port, or creating only an HTTP rule, does not replace a TCP rule that permits the WebSocket connection.
Connect with RustAdmin
RustAdmin is a desktop administration client that supports the WebRcon connection type.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
- Open RustAdmin and go to the Configuration tab.
- Enter the server’s reachable IP address or hostname.
- Enter the exact RCON port from the launch command and startup verification, not the game port unless you deliberately assigned them the same number.
- Enter the RCON password exactly as configured.
- Set the server type or protocol selector to WebRcon. Selecting a legacy RCON mode will not negotiate the WebSocket service enabled by
+rcon.web 1. - Save the profile and connect. Once authenticated, issue a harmless read-only command first, such as checking server information, before running administrative changes.
A red status bar usually means the client could not complete the connection or authentication. Check the address, TCP port, protocol selector, and password in that order. If the password includes # or a double quote, inspect the parser issue described above and temporarily test with a safer character set.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Connect from Facepunch’s browser client
Facepunch maintains a browser-based WebRCON project that connects over WebSockets. The hosted client is available at facepunch.github.io/webrcon.
- Open the client in a modern browser.
- Provide the server address, the explicit RCON port, and the RCON password when prompted.
- Start the connection and confirm that the client reaches the console rather than merely loading the page.
- Run a low-risk command to verify that the session is authenticated before changing settings or kicking players.
The browser client still needs the same network path as RustAdmin: the TCP port must be reachable from the browser’s network, and the server must be running WebRCON. A browser tab cannot bypass a closed firewall, an unforwarded router port, or a host that does not expose RCON.
Managed-host differences
Hosting companies can assign RCON a different port for each server, place it behind a proxy, or omit public RCON access entirely. Some panels display separate game, query, Rust+, and RCON ports; others reveal the RCON value only after the feature is enabled.
- Check the host’s current port list before editing the client.
- Use the host-provided RCON port even when it differs from 28015 or 28016.
- Ask support whether the panel already applies the firewall rule. Adding a second rule at the server level cannot make a hidden or provider-blocked port reachable.
- If the host offers an administrator VPN or allow-list, use it instead of opening RCON to the public Internet.
Troubleshoot common failures
The client times out
- Confirm that the server restarted after the launch options were saved.
- Verify that the listener is on the configured port, not the game port or an old value.
- Check that the firewall rule is TCP and that any router or cloud rule forwards the same port.
- Test from a network outside the server’s LAN; local hairpin routing can give misleading results.
- For a managed server, confirm that the provider permits external RCON connections.
The client connects but rejects the password
- Copy the password from the active launch configuration, not from an old note or panel profile.
- Check for invisible spaces, shell quoting errors, and characters interpreted by the panel.
- Change the password to a newly generated long secret, restart, and update every client profile.
- Never leave the sample value from a documentation command in production.
RustAdmin shows a red status bar
Ensure the server type is WebRcon. Then check for special-character parsing, especially # and double quotes in the password. A successful TCP connection followed by an immediate failure usually indicates protocol selection or authentication, while a timeout points to routing or firewall configuration.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteThe browser opens a blank page or ordinary HTTP error
WebRCON is a WebSocket endpoint, not a conventional HTML control panel. Use a WebRCON-capable client and supply the endpoint details there. An http:// page on the RCON port is not evidence that the service is configured correctly.
The server starts but no RCON port is listening
Inspect the exact command executed by the service or host panel. Common causes are editing an unused startup script, a panel overwriting custom arguments, a syntax error that drops later options, or a port collision. Re-enter all three options, restart, and verify the resulting listener before opening the firewall.
Secure the RCON installation
WebRCON sends the password in the connection URL without encryption. Anyone able to observe that connection path could recover the credential. Treat the RCON port as an administrative control plane, not as a public game service.
- Use a long, unique password generated for this server only.
- Prefer a VPN or a firewall allow-list limited to administrator addresses.
- Do not post the launch command, screenshots, browser history, or connection URLs where the password is visible.
- Remove old administrator profiles and revoke access when a staff member leaves.
- Change the password after sharing it with a temporary administrator or after any suspected exposure.
- Keep the RCON port separate from the public game port when your hosting arrangement allows it; separation makes firewall rules easier to audit.
WebRCON and the future of Rust administration
Facepunch’s WebRCON project indicates that web RCON is intended to become the default mode eventually and that the legacy protocol is expected to be removed at some point. No removal date is established. New configurations should therefore use WebRCON and clients that explicitly support it rather than building a new workflow around legacy protocol support.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Quick Recap
Final setup checklist
+rcon.web 1is present in the command that actually starts the server.+rcon.passwordcontains a long, unique secret and is not empty.+rcon.portis explicitly assigned and recorded.- The server was restarted after saving the options.
- The startup log or host panel confirms the active RCON port.
- The chosen port is allowed over TCP, not UDP.
- The game port remains allowed over UDP.
- RustAdmin is set to WebRcon, or the browser client is using a WebSocket-capable connection.
- Access is restricted with a firewall, VPN, or administrator allow-list.
- No sample password or exposed connection URL remains in use.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
