Valheim whitelist: permittedlist.txt
The whitelist is permittedlist.txt. Once it holds a single entry, the server refuses everyone who is not on it, password or not, and every 5 seconds it kicks any connected player who is not on it. This page covers how to set it up, which IDs to use, and the traps, checked against the Valheim 1.0.17 server code on 14 October 2026.
How to set up the whitelist
- On a Supercraft server: open the configuration tab, add each player's ID to the Permitted List in the access settings, save, and restart. The server writes that list into
permittedlist.txtat every start and keeps any ID you added to the file yourself. - On your own server: edit
permittedlist.txtin the save folder (~/.config/unity3d/IronGate/Valheim/by default, or your-savedir), one ID per line. The server rereads it within about 10 seconds, no restart needed. - Add yourself first. The moment the list has one entry, anyone missing from it is kicked within seconds, the server log reading "Kicking player not in permitted list".
Which IDs to use
- Have each player join once and read their ID from the F2 panel:
V_and the SteamID64 for a Steam player,X_,S_orN_and a number for Xbox, PS5 and Switch 2. - A Steam player also matches
Steam_plus their SteamID64, or the bare 17-digit number. - Console players match only their own ID, so a list of SteamID64s locks out every Xbox, PS5 and Switch 2 friend on a crossplay server.
- Iron Gate's server manual calls these Platform User IDs and notes they are case sensitive.
How it works with the other lists
- bannedlist.txt is checked as well: a player on both lists is still refused.
- adminlist.txt is separate: being on the whitelist does not make a player an admin. See grant admin.
- A refused player shows up in the server log as "is blacklisted or not in whitelist".
For removing individual players instead, see ban, kick and unban.
Keep your Vikings safe with iron-clad security. Host your Valheim server with Supercraft and manage your whitelist, ban list and admins from the panel's access settings.