Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
Skip to content
VGSources
Blog

How to Make a Starbound Server Private With a Password

Use the generated starbound_server.config, add account-bound serverUsers credentials, set allowAnonymousConnections to false, and configure TCP port 21025 so only invited players can join.
Length9 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To password-protect a dedicated Starbound server, stop it, run it once so it creates storage/starbound_server.config, add account credentials under serverUsers, set allowAnonymousConnections to false, save valid JSON, and restart. Friends then connect from Multiplayer with the server address, account name, and password. This account-based method is the preferred approach when the installed server supports that key.

The file is generated by the server rather than supplied as a universal template, so use the configuration produced by your own installation. Older tutorials describe a different serverPasswords array in default_configuration.config; that layout may not work with a newer build.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What a private Starbound server actually requires

A private server has two separate concerns: authentication and network reachability. Authentication determines whether a connecting player has an accepted account and password. Reachability determines whether the player can reach your machine at all through the Internet, router, and firewall. You need both. A correctly passworded server is still inaccessible if its game port is blocked, while an open port is not private if anonymous connections remain enabled.

Starbound’s account-bound system does not create separate character inventories or worlds for each login. The account names are credentials used to protect the server. A normal player account and an administrator account can coexist, but player data is not attached to those account names.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Setting or task What it controls Private-server goal
serverUsers Account names, passwords, and administrator status Add at least one non-admin account for friends; keep admin credentials separate
allowAnonymousConnections Whether clients may connect without authenticating an account Set to false
TCP port 21025 The normal Starbound game connection port Allow it through the host firewall and forward it to the server computer when hosting at home
Multiplayer join form The client-side address and credentials Enter the server address, account name, and matching password

The documented Linux configuration lists allowAnonymousConnections with a default of true. That default permits unauthenticated connections, so changing it to false is the setting that makes the account password mandatory.

Before you edit the server

  • Have access to the dedicated-server installation directory and permission to edit its files.
  • Know whether the server is running on Linux or Windows; the file location is relative to the server’s own directory in either case.
  • Have the server’s address ready. Players on the same computer can test with 127.0.0.1; people outside your home network need your reachable public address or DNS name.
  • Choose two different, strong passwords if you will use both a player and an administrator account. Do not give administrator credentials to ordinary players.
  • Plan a short maintenance window. Stop the server before editing so it cannot overwrite your changes.

Step-by-step: password-protect the generated configuration

1. Start the dedicated server once, then stop it

If the installation has never been launched, run the dedicated server and allow it to finish initialization. The Steam Community setup guide notes that the first run generates the proper configuration. Stop the process cleanly after the file appears. Editing a file before that first run can leave you working on the wrong template or on a file the server will later replace.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In the server directory, look for a storage folder containing starbound_server.config. The file is JSON, so braces, quotation marks, commas, and Boolean values must follow JSON syntax exactly. Do not edit a similarly named client configuration in your game installation; the dedicated server’s own storage directory is the relevant location.

2. Make a backup before changing anything

Copy storage/starbound_server.config to a safe location, for example starbound_server.config.backup. Keep the original file until you have confirmed that the server starts and friends can authenticate. A backup gives you a quick recovery path if a comma is deleted, a quote is mismatched, or an unrelated setting is changed accidentally.

3. Add account-bound credentials under serverUsers

Open the generated file in a plain-text editor and find the existing serverUsers object. If the key is absent but the installed server’s documentation supports account-bound passwords, add the object at the top level, separated from neighboring settings by a comma. A documented pattern with one administrator and one ordinary player is:

{
  "serverUsers" : {
    "admin" : {
      "admin" : true,
      "password" : "MyAdminPassword"
    },
    "player" : {
      "admin" : false,
      "password" : "MyPlayerPassword"
    }
  }
}

The names admin and player are examples, not required labels. Replace them with account names that you will recognize. Replace both example passwords with long, unique values. The admin Boolean grants administrator privileges; set it to false for accounts intended only to play.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

Do not put a trailing comma after the final property in an object. JSON accepts double quotation marks around keys and string values, but it does not accept comments, single quotes, or unquoted passwords. If your generated file already contains other settings, preserve them and insert the new object using the same top-level structure.

4. Disable anonymous connections

Set the top-level option to a JSON Boolean, not a quoted string:

"allowAnonymousConnections" : false

If the file currently says true, change only the value. With this option disabled, clients must supply one of the configured account names and its matching password. Leaving the value at true defeats a password-only setup because an unauthenticated client may still be accepted.

5. Check the JSON before saving

Review the surrounding lines for these common errors:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • A missing comma between two top-level settings.
  • A missing closing brace for serverUsers or the entire configuration object.
  • Curly “smart” quotation marks inserted by a word processor.
  • true or false written as "true" or "false".
  • A duplicate top-level key created by pasting a second serverUsers object.

Save as plain text with the exact filename starbound_server.config. Do not let an editor append .txt to the name.

6. Restart and verify the result

Start the dedicated server and watch its log or console for startup errors. If the server accepts the file, stop-and-start testing should preserve your account entries. If the JSON contains a syntax error, the Starbounder Wiki documents a protective behavior: the server renames the invalid file to starbound_server.config.old and creates a default configuration in its place. That can look like your password settings vanished.

Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

When this happens, stop the server, keep the generated default file as a reference, and compare it with your backup. Correct the syntax in the backup or reapply the changes carefully, then replace the active file and restart. Do not repeatedly edit the newly generated default without first preserving the known-good copy.

Make the server reachable without making it anonymous

Open the correct game port

The documented Starbound game port is TCP 21025. Permit that port in the operating system firewall on the computer running the dedicated server. If the server is behind a home router, create a port-forwarding rule for TCP 21025 to the server computer’s local IP address. Assign that computer a stable local address, such as a DHCP reservation, so the forwarding rule does not break after a reboot.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Only forward the port to the machine that actually runs the server. Do not expose unrelated administration services. Router interfaces use different labels, but the required values are the same: external TCP port 21025, internal TCP port 21025, and the server computer’s private address.

Test locally before asking friends to connect

From the same computer, open Starbound’s Multiplayer screen and try 127.0.0.1 as the address with the non-admin account and password. A local success proves that the configuration and credentials are valid, but it does not prove that the router or firewall permits outside traffic.

For a test from another device on the same home network, use the server computer’s private LAN address. For an Internet player, use the public address or DNS name that resolves to the router. Your Internet service may change that public address periodically; if it changes, friends must use the new one unless you have a reliable DNS name.

How friends join the password-protected server

  1. Launch Starbound and open Multiplayer.
  2. Enter the server’s IP address or DNS name.
  3. Enter the account name you created under serverUsers.
  4. Enter that account’s password.
  5. Select Join Server.

The Starbounder Wiki describes the account and password fields as optional when a server has no authentication configured. With anonymous connections disabled, friends should use the supplied player account rather than leaving those fields blank. Give them the non-admin credentials only; keep the administrator account private.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

If several friends will play, they can all use the same non-admin account because these credentials protect access rather than hold separate character data. You can also create multiple non-admin entries when you want to revoke one person’s access without changing everyone else’s password.

Why older serverPasswords instructions may fail

Many search results reproduce a Windows hosted-server tutorial published by Chucklefish Forums on November 29, 2013. That older procedure edits default_configuration.config and uses a serverPasswords array. It also lists ports 21025, 21026, and 21027. A later server-manager guide documents account-bound passwords through serverUsers in the generated starbound_server.config instead.

Approach Configuration file Authentication format When to use it
Generated account configuration storage/starbound_server.config serverUsers objects with password and admin Use this when the installed server generates and recognizes the key
Legacy hosted tutorial default_configuration.config serverPasswords array Relevant only to older builds or tooling that explicitly documents this layout

Do not paste a legacy array into a current generated file and assume it will be read. First inspect the file produced by your installed server and follow the syntax supported by that build. If a guide refers to a file that your server never creates, it is describing a different release or a hosting wrapper.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Separate player and administrator access

Use the privilege flag deliberately. A normal player entry should look like "admin" : false. Reserve "admin" : true for an account used by the server owner or trusted operator. Share the player password through a private channel and rotate it whenever someone who should no longer have access knows it.

Because the account system is not a character-ownership system, changing a player’s account name or password does not create a new isolated universe for that player. It changes who may pass the server’s authentication check. Back up the configuration before rotating credentials so you can restore the previous access list if needed.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Troubleshooting by symptom

The configuration file does not exist

Run the dedicated server once, wait for initialization to finish, and stop it. Then look inside that server installation’s storage directory. If you are looking in a client installation or a different server instance, you may be checking the wrong directory.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

The server starts, but friends can still enter without a password

Open the active generated file and confirm that allowAnonymousConnections is the Boolean false, not a quoted value. Confirm that you restarted the server after saving. Also check that you edited the instance actually exposed through the router; multiple installations can have separate storage directories.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A password is rejected

Verify capitalization, spaces, and punctuation in both the account name and password. Have the friend enter the exact non-admin account you supplied. If the server reverted the file after a syntax error, restore the backup and check the startup log before testing credentials again.

The server resets the file after every edit

This is usually invalid JSON. Compare the edited file with the backup and inspect braces, commas, and quotation marks. The documented .old rename is a diagnostic clue: the server could not parse the active file and generated a default replacement.

Local testing works, but remote friends time out

Check the host firewall, router forwarding, and the server computer’s current LAN address. The forwarding rule must use TCP port 21025. Ask a friend to retry while the server is running; a closed port, wrong public address, carrier-grade NAT, or an ISP restriction can prevent outside connections even when local authentication is correct.

A friend can connect but lacks administrator commands

That is expected for an account with "admin" : false. Either continue using the safer player account or provide the separate administrator credentials only to the trusted operator who needs them. Do not make every friend an administrator merely to solve a connection problem.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Home hosting versus managed infrastructure

Home hosting gives you direct control over the generated file, credentials, backups, and update schedule, but you must maintain port forwarding, firewall rules, the machine’s uptime, and the public address. Managed Starbound server hosting can handle infrastructure and reachability for owners who cannot maintain those pieces, but the provider must support your Starbound version and expose the relevant authentication settings. Whichever environment you choose, the private-access logic remains the same: use the configuration supported by that server build, disable anonymous connections, and distribute only the intended account credentials.

Final verification checklist

  • The dedicated server has been run once and created storage/starbound_server.config.
  • A backup of the configuration exists outside the active file.
  • serverUsers contains a non-admin player account and, if needed, a separate admin account.
  • allowAnonymousConnections is set to the unquoted Boolean false.
  • The file saves as valid JSON with balanced braces and no trailing commas.
  • The server restarts without replacing the file with a default configuration.
  • TCP port 21025 is allowed by the host firewall and forwarded by the router when remote access is required.
  • A local test succeeds with the player account, and a remote test uses the correct public address or DNS name.
  • Friends receive the server address, player account, and player password, never the administrator credentials.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.