How to Password Protect a Windrose Server

This guide shows you how to add password protection to a Windrose server, turning an open, accessible server into a private one. You’ll set a password that every player must enter before joining, keeping your world and builds safe from strangers. You’ll need access to the server’s configuration files, which you can edit with any text editor like Notepad or VS Code.

What You’ll Need

• A running Windrose server (the version where you host your own world).
• Access to the server’s root folder on your computer or hosting machine.
• A text editor (e.g., Notepad, Notepad++, or VS Code).
• The ability to restart the server after making changes.

Step-by-Step

1. Locate the server configuration file. In your Windrose server folder, find a file named server.properties or config.toml (the exact name depends on your version). If you see multiple config files, look for one with “server” or “settings” in the name.
2. Open the file in a text editor. Right-click the file and choose “Open with” then your preferred editor. Do not use a word processor like Word, as it may save the file in an incompatible format.
3. Find the password or authentication setting. Look for a line like server-password= or password = "". If you don’t see one, search for “auth” or “private”. Some versions use a separate whitelist option, but a password is the direct way to restrict access.
4. Set a strong password. Replace the empty value with a password that is at least 8 characters long, mixing letters, numbers, and symbols. For example: server-password=MySecretPass123!. Avoid using your real-life passwords or anything easy to guess.
5. Save the file. Press Ctrl+S or use File > Save. Make sure the file is saved as the same type (e.g., .properties or .toml), not as .txt.
6. Restart the server. Shut down the server completely (not just the world, but the server process) and start it again. This is essential for the new settings to take effect.
7. Test the password. From a different device or a fresh game client, try to join the server. You should be prompted to enter the password. Enter it correctly to confirm it works.

Common Mistakes

• Editing the wrong file. Some servers have multiple config files; editing the client-side one does nothing. Always edit the file in the server folder, not the game installation folder.
• Using quotes in the password. In some config formats, quotes are part of the syntax. If you put quotes inside the password value, they become part of the password, causing login failures. Stick to letters, numbers, and symbols like !@#$%.
• Forgetting to restart. The server will not apply the new password until it is fully restarted. A simple world reload is not enough.
• Setting a password that is too short. A 4-character password is easy to brute-force. Use at least 8 characters.
• Sharing the password publicly. If you post it in a chat or forum, your server is no longer private.

Tips

• Use a passphrase. Something like BlueElephant#42 is easier to remember and harder to crack than a short random string.
• Change the password periodically. If you suspect someone leaked it, or just as a routine, update it every few months.
• Keep a backup of the original config file. If something goes wrong, you can restore it and start over.
• Combine with a whitelist. For maximum security, use both a password and a whitelist (if your version supports it). This way, even with the password, only listed players can join.
• Write the password down somewhere safe. It’s easy to forget, especially if you haven’t played in a while.

Troubleshooting

Players are not prompted for a password. This usually means the server didn’t pick up the change. Check that you edited the correct file and restarted the server. Also verify that the setting name is spelled exactly as expected (e.g., server-password not server_password).

Players get “Invalid password” even when entering the correct one. This often happens if there are extra spaces around the password in the config file, or if the file was saved with a BOM (Byte Order Mark) that adds invisible characters. Re-save the file as UTF-8 without BOM.

You can’t find the password setting at all. Some versions of Windrose may not have a built-in password option. In that case, you can use a third-party server wrapper or a firewall rule to restrict access by IP address, but that’s more complex. Check the server’s documentation for “authentication” or “access control”.

The server fails to start after editing the config. This usually means you made a syntax error. Open the file again and check that you didn’t accidentally delete a quote or equals sign. Compare with a backup if you have one.

Password works, but players can still join without it. This might happen if the server has multiple configuration files and you edited only one. Search for “password” in all files in the server folder and update all occurrences.

Frequently Asked Questions

Can I change the password while the server is running?

No, you must edit the config file and restart the server for the change to take effect. Some server consoles allow a command like /setpassword, but that’s not standard.

Will the password protect against DDoS or hacking?

No, a password only prevents unauthorized players from joining. It does not protect the server from network-level attacks or exploits. Use a firewall and keep the server software updated.

Can I have multiple passwords for different players?

No, the built-in password is a single shared password. For per-player access, use a whitelist or a permission plugin if your version supports mods.

What if I forget the password?

You can always edit the config file again to set a new password. You don’t need the old one to change it.

Is the password sent in plain text?

In most local server setups, the password is sent over the network in an encrypted or hashed form, but it’s not guaranteed. For maximum security, use a VPN or play on a trusted network.

Does setting a password affect server performance?

Negligibly. The password check happens once at login and has no measurable impact on gameplay or server load.

Related

• Fix Windows 11 Freezing When Scanning for Hardware Changes
• How to Reset OneDrive in Windows 11
• Fix System Restore Error 0x8007045d in Windows 11