October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Set Up a Steam-Group Whitelist on a Space Engineers Dedicated Server

Use the Dedicated Server’s Steam Group ID field to create a whitelist-style Space Engineers server. This guide covers installation, group-ID retrieval, passwords, user controls, networking, testing, and troubleshooting.
Length14 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Space Engineers does not use a separate checkbox labeled “Whitelist.” Its built-in whitelist-style control is the Steam Group ID field in the official Dedicated Server configuration. Entering a non-zero group ID makes the server visible only to members of that Steam group. You can add a password for a second check, while the Users tab remains available for individual administrators, bans, and reserved slots.

The procedure is: install and start the dedicated server, create or select a Steam group, copy its numeric ID from the group’s invite URL, enter that number under Server Settings, save and start the instance, then configure networking and test with accounts inside and outside the group.

As an Amazon Associate I earn from qualifying purchases.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Space Engineers’ “whitelist” actually does

Keen Software House documents the Steam-group restriction as a visibility rule rather than a separately named whitelist. When Steam Group ID contains a non-zero number, the dedicated server is visible only to that Steam group. Every player you want to admit must belong to the group.

This is different from the individual controls in the Users tab:

#1 Best Overall
Homeworlds Pyramid Strategy Game - Deep Space Warfare for Two Players
  • Family Games - Homeworlds is a deep strategy game with no board and only 36 pieces. This fun family game requires perfect information, resource management and galactic wars. Can you destroy your opponent's world before their space fleet reaches yours
  • Pure Strategy Game - If you enjoy strategy board games or card games you will love Homeworlds. Made for 2 players from 8 to adult. Play time ranges from 30-60 minutes. Take an hour to learn and a lifetime to master
  • Family Games for Game Night - Homeworlds has been developed to perfection. This interesting game keeps engagement high. Perfect for game night for families and friends. This edition is good for couples, girls night, travel games, party games and more
  • Cool Gifts - A fun card game or board game makes a really great gift for boys and girls age 8 and up. If you want the ultimate challenge, join the robust online community. You can play with the best and join the fan-run tournament held every year
  • Looney Pyramids - This game is super fun on its own or it can be expanded to play other games. The colorful, pyramid shaped pieces add a twist instead of playing with a deck of cards. Other games in the series include Nomids, Martian Chess & Ice Duo
  • Admins grants administrative permissions to selected Steam accounts.
  • Banned blocks selected accounts.
  • Reserved slots gives selected accounts priority access when the server is full.

A Steam-group restriction controls who can discover the server. It does not automatically make a group member an administrator, and adding someone as an admin does not make the server private. Likewise, a password and a group ID solve different problems: the group ID narrows visibility, while the password supplies an additional admission check.

Before you begin

  • A Windows computer or hosted instance capable of running the Space Engineers Dedicated Server.
  • A Steam account and a Steam group whose membership you control.
  • Administrator rights if you will install the server as a Windows service or change firewall settings.
  • A known listening port and access to the router if the server will be reachable over the Internet.
  • A plan for world saves, backups, updates, and who will hold administrator privileges.

Decide whether this is a LAN server or an Internet-facing server before changing router rules. A LAN-only instance avoids public port forwarding, while an Internet instance needs a stable local destination, firewall access, and a reachable public address.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Publisher-stated server requirements

Keen Software House’s Dedicated Servers guide lists the following figures. They are publisher-stated requirements, not an independent performance benchmark; actual capacity depends on the world, mods, simulation load, and number of players.

Category CPU Logical cores Memory Bandwidth Other guidance
Minimum listed 3.2 GHz 3 6 GB RAM 5 Mbps Not stated
Recommended figures listed 4.5 GHz 3 10 GB RAM Not stated Use a static public IP for Internet hosting

Treat the values as a starting point. A heavily modded or large-world server can need more headroom than the minimum, and a machine that meets the figures may still need tuning. Leave operating-system overhead available instead of assigning every megabyte to the game process. The guide does not provide a universal player count for these specifications, so do not promise a capacity based on the table alone.

Install the official dedicated server

Installation through Steam

  1. Open the Steam client and go to Library.
  2. Change the library filter to Tools.
  3. Find and install Space Engineers Dedicated Server.

Installing through Steam is convenient when the host already has the client and an administrator can sign in. Keep the installation path recorded, because the configuration executable and any service setup depend on the folder you select.

Installation with SteamCMD

If Steam is not installed on the server computer, Keen’s guide uses SteamCMD and app ID 298740. Run the command from the SteamCMD directory, replacing the destination with the folder you want to use:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
steamcmd.exe +login anonymous +force_install_dir somedirectorypath +app_update 298740 +quit

Use a dedicated folder with sufficient free disk space and write permissions. Keep the server files separate from worlds, backups, and any management tools so updates and recovery are easier. SteamCMD is an installation and update method; it does not itself create the group restriction.

Create and start a server instance

Run the configuration interface

  1. Launch SpaceEngineersDedicated.exe.
  2. Select Local/Console.
  3. Choose Continue to server configuration.
  4. Set a server name and world name, then open the server settings used by that instance.

For a normal foreground server, use Save & start after configuring the instance. The server then runs as a process on that computer. Keep the console window available while commissioning the server so startup errors, port conflicts, or failed world loads are visible.

Run it as a Windows service

A service allows the instance to run in the background and start independently of an interactive desktop session. Run the dedicated-server executable as an administrator, add an instance, assign it a unique service name, and configure that instance. Service creation and management require administrator rights. Record the service name and configuration location so another administrator can restart or troubleshoot it later.

A service is an operational choice, not an access-control feature. Configure and test the group ID in the instance first, then automate startup. If several worlds run on one machine, give each instance its own service name, world data, and listening port to avoid collisions.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Create or select the Steam group

Use a Steam group specifically for this server if you want membership to be easy to audit. Add every intended player before testing the server. Group membership is the gate used by the server’s visibility restriction; being on your Steam friends list is not a substitute.

Tell players which Steam account must join the group. A player who has multiple accounts, or who joins with a different account from the one used in Space Engineers, can appear to be blocked even when the group itself is configured correctly.

Find the numeric group ID

  1. Open the Steam group’s page.
  2. Click Invite Friends.
  3. Look at the invite page URL.
  4. Find the long number after invitegid=. Copy only that numeric value.

Do not paste the group’s display name, a profile URL, or a player’s Steam ID into the group field. The server expects the group’s numeric identifier. Preserve the number in your administration notes so you can compare it later if the group name changes.

Apply the whitelist-style restriction

  1. In the dedicated-server configuration, open Server Settings.
  2. Locate Steam Group ID.
  3. Enter the numeric group ID obtained from the invite URL.
  4. Confirm that the value is non-zero.
  5. Save the configuration and start or restart the server instance.

Keen’s documented behavior is that a non-zero value makes the dedicated server visible only for the specified Steam group. A zero value does not provide that group-only restriction. There is no separate “enable whitelist” switch to turn on after entering the number.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What players should expect

A member of the specified group should be able to find the server through the normal Space Engineers server browser, subject to the server’s network type, port, and firewall being correct. An account outside the group should not see the server in the same way. Visibility is not proof that the player has administrator privileges; those are separate settings.

Changing the group, adding a member, or correcting the ID should be followed by a save and server restart before judging the result. Keep the server name recognizable but avoid publishing the group ID or password in a public listing.

Rank #2
Skillmatics Guess in 10 – NASA Space, Educational Card Game, Gift for Kids
  • ULTIMATE GUESSING GAME: Divide yourselves into teams, or play one on one. Ask up to 10 questions to guess what's on the game card! Is it a planet? Does it emit its own light? Think hard, ask intelligent questions, use your clue cards wisely, and be the first player to collect 7 game cards to win!
  • EDUCATIONAL FUN: Experience the thrill of learning all things space with this educational game! Explore everything from the Milky Way to each planet in a fun and competitive way, complete with captivating NASA images!
  • STRATEGIZE YOUR WAY TO VICTORY: Make use of exciting features such as Clue Cards and Bonus Questions to plan your way to winning 7 cards.
  • PLAY IT ANY TIME, ANY PLACE: Includes 50 Collectible Game Cards, 6 Clue Cards, and a portable box. Ideal for game nights, parties, playdates, road trips, travel, and outdoor adventures.
  • BEST GIFT EVER!: Makes the perfect gift for boys, girls, parents, adults, friends, families, as well as for any board game, card game or space lover.

Add a password when you need two checks

The same Server Settings area includes a password field. A password adds another access check after the group-based visibility rule. Use it when group membership alone is not sufficient—for example, when you want to keep the server discoverable only to a small community and still require a shared secret.

Distribute the password through a private channel and change it if it is leaked. Do not treat the password as a replacement for the group ID: a password by itself does not implement the documented Steam-group visibility restriction. Conversely, changing the password does not change which accounts can see the server.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Configure individual users

Open the Users tab when you need account-level exceptions or permissions. The guide allows you to select people from the Steam friends list or from world history. These lists are evaluated separately from the Steam Group ID field.

Administrators

Add a player to Admins only when that account should have server-management powers. The group whitelist does not grant these rights automatically. Keep the administrator list short, review it when staff change, and avoid giving administrative access merely because someone is a group member.

Banned users

Add a Steam account to Banned to block it even if the person belongs to the permitted group. A Steam ID is the account’s unique numeric identifier in 64-bit format; verify the identity before banning, especially when names are similar. A ban is an individual control and should not be confused with removing the entire Steam group restriction.

Reserved slots

Use Reserved slots for trusted players who should retain access when the server reaches its player limit. This is an admission-priority feature, not a way to make the server visible to someone outside the Steam group. A reserved-slot user still needs to satisfy the group and password checks that apply to the server.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Make the server reachable

LAN-only hosting

For a local network, keep the server on the LAN and allow the game executable and listening port through the host computer’s firewall. Players must be on the same network and use the appropriate network type in the server configuration. You normally do not need public router forwarding for a strictly local server.

Internet hosting

For players outside your home or office network, forward incoming UDP traffic on the configured listen port from the router to the server computer. Also create an inbound firewall rule for that port on the server machine.

Keen’s official default listen port is 27016. The configuration tool can change it, so forward and allow the actual value shown in your instance rather than assuming the default. A static public IP is recommended in the guide for Internet hosting; without one, a changing address can make it harder for players to reconnect.

Network checklist

  • Confirm the server’s configured network type.
  • Record the actual UDP listen port.
  • Assign the server computer a stable address on the local network so port forwarding does not point to the wrong device after a reboot.
  • Forward the UDP port on the router to that local address.
  • Allow the same port through the operating system firewall and any security suite.
  • Check whether the Internet service provider uses carrier-grade NAT, which can prevent inbound forwarding even when router settings look correct.
  • Check for another application already using the chosen port.

Do not expose additional ports simply because a guide or hosting panel offers them. Start with the configured game port, verify connectivity, and document any deliberate changes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Validate the restriction safely

Test both sides of the rule instead of relying on the configuration screen alone:

  1. Have an account that is definitely a member of the Steam group search for the server.
  2. Have an account that is not a member search from the same network conditions.
  3. Confirm that the member can pass the password check if one is configured.
  4. Confirm that the non-member cannot discover the server through the browser.
  5. If you changed the group membership or ID, restart the server before repeating the test.

Run the outside-group check with a genuinely different account. Testing from the same account after removing and re-adding membership can be misleading because Steam clients and server listings may cache information temporarily. Also test an administrator account separately: seeing the server and having admin commands are two independent outcomes.

Troubleshoot a server that is not visible

Check the group value first

  • Reopen the invite URL and recopy the number after invitegid=.
  • Make sure the field contains only digits and is not the group name or a player’s Steam ID.
  • Verify that the intended player’s Steam account has joined the exact group represented by that ID.
  • Confirm that the value is non-zero and that the instance was saved and restarted.

Check configuration and transport

  • Verify the selected network type.
  • Confirm the configured listen port; the documented default is UDP 27016, but an instance may use another value.
  • Check the router’s UDP forwarding rule and ensure it targets the server’s current local IP address.
  • Check the operating-system firewall and any upstream firewall.
  • For Internet hosting, verify that the public address has not changed and that the connection is not behind carrier-grade NAT.
  • Make sure the server process is running and that no second instance is competing for the same port.

Separate visibility problems from permission problems

If a player can see the server but cannot use administrative commands, inspect the Admins list. If a trusted player cannot join a full server, inspect Reserved slots. If a member is rejected while others can join, check the account’s membership and whether it appears in Banned. These are separate from the Steam Group ID mechanism.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Official interface versus optional management software

You do not need third-party software to restrict visibility to a Steam group. The official Dedicated Server UI is sufficient for the group ID, password, user lists, world settings, and network configuration.

Torch is an optional third-party management layer. Its project describes a WPF interface, live management tools, chat interaction, an entity manager, an organized configuration editor, and a plugin system. Its documented installation approach is to download the latest release, extract it into its own directory, and run the executable; an existing DedicatedServer64 installation can also be used.

Choose Torch for operational features you specifically need, not to obtain the basic whitelist-style restriction. Because it is maintained separately from Keen’s server UI, its menus and compatibility can change independently. Keep the official configuration working first, and back up the instance before adding plugins or changing management software. A plugin cannot compensate for a blocked UDP port or an incorrect Steam group number.

Rank #3
Gifts for Engineers – Engineering Playing Cards Deck – Cool Engineer Gift for Men, Graduation, Father’s Day, Dad & College – Unique Mechanical, Electrical & Civil Engineering Cards
  • 52 Unique Engineering Drawings from Real American Patents — Every single card features a different engineering schematic sourced from authentic, expired American patents. Mechanical mechanisms, aerospace systems, electrical circuits, civil structures, and much more!
  • Premium Quality Playing Cards – Standard 3.5” x 2.5” Poker Size — Printed on high‑quality, durable card stock with a smooth, linen‑style finish for professional handling and long‑lasting performance. These engineering playing cards are perfect for poker night, game night, cardistry, magic, collecting or display. Designed to feel like a luxury deck while maintaining official casino dimensions.
  • Interactive QR Code to Explore Each Patent Drawing — Scan the built‑in QR code to unlock deeper insight into the engineering behind the artwork. Learn about the original inventors, patent numbers, design intent, mechanical principles, electrical concepts and real‑world applications. Perfect for engineers, students and curious minds who want to dive deeper into the STEM behind the art.
  • Extremely Detailed Engineering Art – Printed at 0.1mm Resolution Accuracy — Each patent drawing is reproduced with ultra‑fine precision down to 0.1mm line accuracy, capturing every gear, circuit, bolt, beam, linkage and contour. The intricate detail makes the deck mesmerizing to look at, creating a visually stunning and immersive experience for engineers, students, designers and STEM lovers.
  • Highly Unique & Collectible – Perfect for Playing Card Enthusiasts — A standout addition to any playing card collection, engineering collection or STEM display. Ideal for card collectors, poker players, cardistry fans, magicians, engineers, designers and anyone who appreciates technical art. A rare, niche, premium deck that makes an unforgettable gift for engineers and collectors alike.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Self-hosting and managed hosting

A self-hosted Windows machine gives you direct access to the configuration executable, router, firewall, worlds, and backups, but you are responsible for uptime, updates, security, and bandwidth. A managed host can remove router and hardware work, although the provider’s control panel may expose different labels or limit service-level access. For Xbox or hosted deployments, follow the provider’s current instructions for where dedicated-server settings are entered; the Steam-group field and available user controls may not be presented identically on every platform.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Keen Software House identifies GTX Gaming as the official PC host and Nitrado as the official Xbox host. These are hosting alternatives, not whitelist software. Confirm current plans, pricing, platform support, and any affiliate terms directly with the provider; the Dedicated Server guide does not establish a universal hosting price.

Approach Access control Network work Operational trade-off
Self-hosted, LAN Steam group, password, user lists Local firewall; no public forwarding required Lowest exposure, but players must be on the LAN
Self-hosted, Internet-facing Steam group, password, user lists UDP forwarding, firewall rule, stable public addressing Full control; you maintain security and availability
Managed host Depends on the host’s Space Engineers panel; confirm group-ID support Usually handled by the provider Less hardware work, less control over the underlying machine

Ongoing administration and common pitfalls

Keep a private record of the group ID, instance name, port, service name, administrator list, and backup location. When a player leaves the community, remove them from the Steam group and review any admin or reserved-slot entry. When a new person joins, add them to the group first, then test visibility before granting any elevated permission.

Back up the world and configuration before changing ports, switching from a foreground process to a service, or installing Torch plugins. Avoid editing an inactive instance while another service instance is running; otherwise you may save settings to the wrong profile and troubleshoot the wrong process. If the server is moved to another machine, repeat the firewall and forwarding checks even if the Steam Group ID is unchanged.

Quick operational checklist

  • Install the Dedicated Server with Steam or SteamCMD app ID 298740.
  • Start SpaceEngineersDedicated.exe and continue to server configuration.
  • Create or select the Steam group and copy the number after invitegid=.
  • Enter that number in Server Settings > Steam Group ID.
  • Optionally set a password.
  • Use Users for admins, bans, and reserved slots—not for group visibility.
  • Save and start or restart the instance.
  • For Internet play, forward the configured UDP port (27016 by default) and allow it through the firewall.
  • Test with one group member and one account outside the group.
  • Document the working settings and back up the world before major changes.

Frequently Asked Questions

Is there a checkbox called Whitelist in Space Engineers?

No. The documented whitelist-style control is the non-zero Steam Group ID field in Server Settings. It restricts server visibility to that group.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Where do I put the Steam Group ID?

Open the official dedicated-server configuration, select the instance’s Server Settings, and enter the numeric group value in Steam Group ID. Save and restart the server.

How do I find the correct group ID?

Open the Steam group page, choose Invite Friends, and copy the long number after invitegid= in the resulting URL. Enter only the digits.

Can I whitelist individual players instead of using a group?

The documented restriction is group-based. Use the Users tab for individual admins, banned accounts, and reserved-slot users; those lists are not a replacement for the group visibility rule.

Does joining the group make someone an admin?

No. Group membership controls visibility. Add a Steam account separately to Admins only when it should receive administrative permissions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can I use a password as the whitelist?

A password adds an access check, but it does not implement the documented Steam-group visibility restriction by itself. For a private community, use the group ID and optionally add a password.

What port does the server use by default?

Keen’s guide lists UDP port 27016 as the default listen port. Check the instance configuration because the port can be changed, then forward and allow the actual value.

Why can a group member not see the server?

Verify the numeric ID, group membership, saved and restarted configuration, network type, running process, UDP port, router forwarding, firewall rule, public address, and possible carrier-grade NAT. Also confirm the player is using the intended Steam account.

Do I need Torch to create the whitelist?

No. The official Dedicated Server UI provides the Steam Group ID restriction. Torch is optional management software for features such as live tools, chat interaction, entity management, configuration editing, and plugins.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Can I run the dedicated server as a Windows service?

Yes. Run the executable as an administrator, add an instance, give it a unique service name, and configure it. Creating and managing services requires administrator rights.

What hardware does Keen list for a dedicated server?

The guide lists a minimum of a 3.2 GHz CPU with three logical cores, 6 GB RAM, and 5 Mbps bandwidth. Its recommended figures include a 4.5 GHz CPU with three logical cores and 10 GB RAM, plus a static public IP for Internet hosting.

The Bottom Line

Enter the numeric Steam group ID from the invitegid= invite URL in Server Settings > Steam Group ID, save, and restart. Use a password for an extra check, the Users tab for admins, bans, and reserved slots, and UDP forwarding plus firewall rules when hosting over the Internet.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.