Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Whitelist Players on a Sons of the Forest Server

Sons of the Forest uses two different controls often called a whitelist: a non-empty Password in dedicatedserver.cfg for private joining, and ownerswhitelist.txt for trusted server-owner administration.
Length12 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In Sons of the Forest, “whitelisting” can mean two different things. To limit a dedicated server to invited players, set a non-empty Password in dedicatedserver.cfg. To give trusted people administrative control, add their SteamID64 values to ownerswhitelist.txt. The owner file grants powerful server-owner permissions; it is not a documented guest allow-list.

Choose the control you actually need

Before editing anything, decide whether you are protecting access or delegating administration. These settings solve different problems and should not be substituted for one another.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Goal Setting or file What identifies a player Result What you must do after editing
Keep a small private group on the server Password in dedicatedserver.cfg A shared password Players who know the password can attempt to join Save valid JSON, restart the server, and share or rotate the password privately
Give a trusted person owner-level control ownerswhitelist.txt One exact SteamID64 per line The listed account receives server-owner administration, not merely guest access Save the file and restart; remove the ID when that trust is no longer appropriate

A password does not make someone an administrator. Conversely, adding every friend to ownerswhitelist.txt is not a safe way to create a normal player whitelist, because each listed account receives high-level powers. The documented dedicated-server configuration does not provide a separate SteamID-based guest allow-list.

Requirements and preparation

You need a running Sons of the Forest dedicated-server instance, access to its server user-data/configuration directory, and permission to stop and restart the process. For the password method, you need only a private value to share with invited players. For owner access, you need each administrator’s exact SteamID64. Keep a backup of the files before editing so you can restore a known-good copy if the JSON becomes invalid or an ID is entered incorrectly.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

The configuration change itself does not require a special whitelist application, physical accessory, router purchase, or separate software product. A managed host may present the same files through a web control panel, while a self-managed installation exposes them in its server data directory. In either case, the important requirements are the correct instance, correct file, valid formatting, and a restart.

Prepare the dedicated server files

Start the server once first

The official dedicated-server guide says the server should be started once so its default files are created. If you have never launched this instance, do that before looking for the configuration files. A newly created user-data area should eventually contain the configuration and data used by the server, including ownerswhitelist.txt, dedicatedserver.cfg, saves, and game settings.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Locate the server user-data configuration directory

Look under the dedicated server’s server user-data folder rather than the ordinary game installation directory. The correct directory is the one that contains both dedicatedserver.cfg and ownerswhitelist.txt (along with the server’s saves and game settings). Managed hosts normally expose this location through a file manager or configuration editor.

If neither file exists, start the server and allow it to finish creating its defaults, then stop it before making changes. Do not create an unrelated file in a random installation folder; the running instance will not read it.

Back up before editing

Make a copy of the configuration file and owner list before changing them. This gives you a quick way to restore a known-good version if a JSON edit introduces a syntax error or an incorrect SteamID grants access to the wrong person. Keep the backup outside the active configuration location so the server does not confuse it with the live file.

Use the host panel’s sequence when applicable

A hosted server may have separate buttons for stopping, editing, saving, and starting. Follow that sequence rather than launching a second process manually. If the panel reports that the server is still online, wait for it to become offline before saving. A panel can reject edits to an active instance or restore the previous file when the service next starts.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to restrict the server to invited players

1. Stop the instance when your host requires it

Many managed control panels require the server to be stopped before configuration files can be edited. Stop it from the panel, wait until the status shows that it is offline, and then open the user-data configuration directory. If your setup allows offline file editing, still make the change while the process is stopped so the running server cannot overwrite it.

2. Edit the JSON configuration

Open dedicatedserver.cfg. It is a JSON file, so preserve its braces, quotation marks, commas, and existing settings. Set Password to a non-empty value, for example:

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
"Password": "use-a-unique-password"

Keep the value in quotes and avoid adding comments, trailing commas, or a second Password entry. If the file already contains a password setting, replace its value rather than adding a duplicate key. A unique phrase that is not reused on other services is preferable, because anyone who learns it can attempt to join.

3. Save, restart, and test

Save the file, close the editor, and start the server again. Test from an intended player account by entering the new password through the normal dedicated-server join flow. Confirm that a player without the password cannot join, then confirm that an invited player can. This test catches both an incorrect file location and an invalid JSON edit.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Run the positive and negative tests after every password change. Testing only from the host account can hide a stale configuration, because the host may already have a session or a cached server listing. A separate intended account provides a more useful check of the actual join requirement.

4. Share and rotate the password safely

Send the password only to the people who should play. If it is posted publicly, shared with someone who should no longer have access, or copied into a place other players can see, change the Password value and restart the server again. A password protects the join attempt; it does not identify individual guests or grant them administrative commands.

Rotation changes the credential for everyone, so tell current players when the new value becomes active. There is no need to add every invited player to the owner file simply because they need the password.

How to grant trusted server owners

1. Stop the server

Stop the dedicated server before editing its owner list, particularly when using a hosted control panel. Editing while the process is running can leave the server using the old contents until its next restart, and a panel may reject or overwrite changes made to an active instance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

2. Open ownerswhitelist.txt

Use the same configuration/user-data directory that contains dedicatedserver.cfg. The official guide identifies ownerswhitelist.txt as the file used to set server ownership. Its name can be misleading: it is an owner list, not a list of ordinary players who are allowed to connect.

3. Add one exact SteamID64 per line

Enter the SteamID64 for each trusted owner, with one identifier on each line. For example:

Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
76561198000000000
76561198000000001

Use the account’s SteamID64, not a nickname, display name, or an abbreviated identifier. Keep the file as a plain list: do not add commas, quotation marks, bullets, comments, or labels. An incorrect numeric ID can fail silently, so copy it carefully and verify it against the intended Steam account before saving.

Maintain one line per person even when several owners are listed. Do not combine IDs on one line or surround them with JSON syntax; this file is not the same format as dedicatedserver.cfg.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

4. Save and restart

Save the file, start the server, and have the listed player join. The operational guidance for hosted servers says that a listed player then receives administrator permissions in-game. If the account does not receive those permissions, stop and recheck the identifier, line formatting, file location, and restart status before adding more entries.

5. Use owner powers sparingly

The official guide describes server owners as having essentially the same rights as a peer-to-peer host, including access to all commands. Owners can use the in-game Pause Menu and Players panel to promote players, demote them, kick guests, and ban or unban guests. Give this access only to people you trust with the entire server, not simply to everyone who needs to play.

That authority is broader than moderation of a single friend. An owner can affect the experience of every connected player, so keep the list short and review it whenever the group’s staffing or trust changes.

6. Remove access when trust changes

To revoke owner access, stop the server, delete that player’s SteamID64 line, save the file, and restart. Removing the line is separate from changing the guest password: if the same person still knows the password, they may remain able to join as a normal player.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When removing an owner, check both controls. Delete the ID to remove administrative powers, and rotate Password if that person should no longer be able to enter the private server at all.

Why ownerswhitelist.txt is not a player whitelist

The filename is easy to misread. In the documented configuration, it identifies server owners, not every player who is allowed to connect. It therefore controls privilege, not ordinary admission. Adding a guest’s SteamID64 to this file can give that guest the ability to manage other players and server commands.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

For private group access, use the non-empty JSON Password. For administration, use the owner file. If you need both, configure both independently: password-protect the server, then list only the few people who need owner powers.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not promise a native hot-reload SteamID allow-list, a ServerSettings.ini whitelist syntax, or a documented RCON workflow based on these files. Those methods are not established by the dedicated-server documentation. Check newer official documentation before relying on a later build’s feature or third-party modification.

Password and owner controls compared

Question Password Owner file
What is the identifier? A shared non-empty value An exact SteamID64
Who should receive it? Every invited player Only trusted administrators
What does it control? Whether a player can attempt to join Whether an account receives owner-level commands
How is access revoked? Replace the password and restart Delete the SteamID64 line and restart
What is the main risk? A leaked credential lets unwanted players attempt to join An incorrect or over-broad entry grants powerful administrative control

Using the least powerful control that meets your goal is the safest pattern. A friends-only session normally needs a password, not an owner list. A community moderator may need owner access, but that person should still be the only account added to the owner file.

Troubleshoot a password-protected server

The server still appears open

  • Confirm that Password is present in the active dedicatedserver.cfg, not a similarly named file elsewhere.
  • Check that the value is not empty and that the file remains valid JSON.
  • Stop and restart the instance after saving; a running process may still have the previous configuration in memory.
  • Test from a separate intended account rather than relying only on the host’s own view of the server.
  • Check that the panel did not restore an older configuration after the restart.

Invited players cannot join with the password

  • Verify the exact capitalization, spaces, and punctuation of the password being shared.
  • Make sure the server restarted successfully after the edit. A JSON syntax error can prevent the new configuration from loading.
  • Confirm that the password was changed in the configuration directory used by this particular server instance.
  • If the password was recently rotated, send the new value privately and stop using old copies.
  • Ask one invited account to test again after the server shows a fully started status.

Troubleshoot owner access

The SteamID does nothing

  • Confirm that the entry is the intended player’s SteamID64, not a display name or nickname.
  • Check every digit against the account that is joining. A wrong numeric ID can fail without an obvious error.
  • Use exactly one ID per line with no comments, extra punctuation, or formatting.
  • Verify that ownerswhitelist.txt is in the same server user-data/configuration directory used by the running instance.
  • Stop and restart the server after saving, then have the listed account reconnect.
  • Test one verified owner entry by itself if a larger list is difficult to audit; this helps identify a malformed line.

The wrong person has owner powers

  • Stop the server immediately and remove the incorrect line from ownerswhitelist.txt.
  • Save the file and restart before allowing normal play to continue.
  • Review any in-game changes that account could have made, including promotions, bans, kicks, or other commands.
  • If the person also knows the private password, rotate the Password value separately.

A panel will not let you edit the file

Use the provider’s file manager or configuration editor and follow its stop-edit-save-start sequence. Managed hosting can perform the same edit as a self-managed server, but the panel may require the process to be offline before it accepts changes. If the panel restores an older copy, download the current file, make the change there, and restart through the panel rather than launching a second server process.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Recommended setup patterns

Private friends-only server

  1. Start the server once and locate the generated configuration directory.
  2. Set a unique non-empty Password in dedicatedserver.cfg.
  3. Restart and test with one invited account.
  4. Share the password privately and rotate it if the group changes.

Private server with two administrators

  1. Complete the password steps above so ordinary access remains private.
  2. Add only the two administrators’ verified SteamID64 values to ownerswhitelist.txt, one per line.
  3. Restart and have each administrator confirm access.
  4. Keep the owner list limited to the people who actually need command access.

Public or community server with moderators

The owner file should still contain only the small group that must have server-owner powers. Do not use it as a roster of every regular player. Where the game’s in-game Players panel supports promotion or demotion, use those controls deliberately and remove elevated access when a moderator leaves.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What is and is not documented

The documented controls establish two reliable actions: a non-empty Password in dedicatedserver.cfg for private joining, and SteamID64 entries in ownerswhitelist.txt for server ownership. They do not establish a separate per-player guest allow-list, a hot-reload mechanism, ServerSettings.ini syntax, or a standard RCON procedure for this purpose. Treat community instructions that describe those features as version- or modification-dependent until a current official build documents them.

That distinction prevents the most common administration mistake: handing out owner powers when the real requirement was simply to keep a small group together. Use the least powerful control that meets the goal, restart after every file change, and verify the result with a test account.

Frequently Asked Questions

Is ownerswhitelist.txt a normal player whitelist?

No. It is the documented owner list. Each SteamID64 entered there receives server-owner administration; it does not create a guest allow-list.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

How do I make a Sons of the Forest dedicated server private?

Set a non-empty Password in dedicatedserver.cfg, save valid JSON, restart the server, and share the password privately.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Where is ownerswhitelist.txt?

It is in the dedicated server’s user-data/configuration directory, alongside dedicatedserver.cfg, saves, and game settings. Start the server once if the default files have not yet been generated.

Why does my SteamID64 not make me an admin?

Verify every digit, use one plain SteamID64 per line, remove comments or extra formatting, confirm you edited the active server directory, and restart before reconnecting.

Can I add every invited player to the owner file?

You should not. Use the password for ordinary access. Add only people who genuinely need owner-level commands, because owners can promote, demote, kick, ban, and unban players.

How do I remove an administrator?

Stop the server, delete that account’s SteamID64 line from ownerswhitelist.txt, save, and restart. Rotate the password separately if the person should also lose normal joining access.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Does the password identify individual players?

No. It is a shared join credential. Anyone who learns it can attempt to join, so rotate it when the group changes or the value is exposed.

Do I need a special product or extra hardware to configure this?

No additional whitelist product or physical accessory is required. You need access to the server files or your hosting control panel, plus the correct password or SteamID64 values.

The Bottom Line

Use Password in dedicatedserver.cfg to keep a Sons of the Forest dedicated server private. Use ownerswhitelist.txt only for a small, trusted set of SteamID64-based server owners. Edit the active files while the server is stopped, preserve the required format, restart after every change, and test with an intended account.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.