How to Make a Minecraft Server Safe for Kids (Step by Step)

To make a Minecraft server safe for kids, turn on the whitelist so only players you add can join, keep online-mode on so every account is verified, give operator rights only to adults, switch off PvP if they want a calm world, and install a rollback plugin like CoreProtect so griefing can be undone. Then check each child's Microsoft account allows multiplayer, or they will see "Multiplayer is disabled". With those in place, a private server is far safer than public servers, because nobody can join unless you put their name on the list.

Why a private server instead of public ones

Public Minecraft servers are open to anyone, with chat from strangers and rules set by people you do not know. A private server reverses that: you choose every player, set every rule and can see everything that happens. It is the main reason families run their own.

If you are still choosing a game, our list of the best games to host a private server for kids and families compares options. This guide is the Minecraft Java Edition setup.

Step 1: turn on the whitelist

The whitelist is the single most important setting. In the server console:

whitelist on
whitelist add PlayerName
whitelist add AnotherPlayer
whitelist list

Use exact Minecraft usernames. To make sure kicked players cannot stay online after you remove them, also set these in server.properties:

white-list=true
enforce-whitelist=true

enforce-whitelist=true kicks anyone not on the list when the whitelist reloads. Our guide on making a game server private covers this for other games too.

Step 2: keep accounts verified

In server.properties:

online-mode=true

This checks every player's account with Microsoft. With it off, anyone could join using any name, including one on your whitelist. Never turn it off on a kids' server.

Step 3: choose who is op

Operators can run any command: teleport, change game mode, kick and ban, give items. Keep op for adults:

op ParentName

If a child wants creative mode, give it to them yourself with gamemode creative ChildName rather than making them op. To remove op: deop PlayerName.

Step 4: set the world rules

In server.properties:

pvp=false
difficulty=easy
spawn-protection=16
enable-command-block=false
hide-online-players=true

• pvp=false stops players hurting each other.
• difficulty can be peaceful (no hostile mobs), easy, normal or hard.
• spawn-protection stops non ops building near spawn.
• hide-online-players=true hides the player list from the multiplayer screen.

Useful game rules, typed in the console:

gamerule keepInventory true
gamerule mobGriefing false
gamerule doFireTick false

These keep items on death, stop creepers blowing holes in builds, and stop fire spreading. On the newest Minecraft versions some game rules have new snake_case names, such as keep_inventory; press Tab after gamerule to see the names your version uses.

Restart the server after editing server.properties.

Step 5: add a rollback plugin

Kids grief each other's builds, often by accident. Run the server on Paper and install CoreProtect. It logs every block placed or broken and every chest opened, and lets you undo it:

co inspect
co rollback u:PlayerName t:2h r:20

The second command undoes everything that player did in the last two hours within 20 blocks of you. It turns arguments into five minute fixes.

If several people help run the server, LuckPerms lets you give them only the commands they need instead of full op.

Step 6: set chat expectations

Minecraft chat on a whitelist server only reaches the people you invited, which already removes strangers. Beyond that:

• Agree on a few simple rules with the kids and post them at spawn with a sign.
• Players can report chat messages to Mojang through the game's chat reporting, which works on servers with enforce-secure-profile=true (the default).
• If you want filtering, chat filter plugins are available on Modrinth and Hangar for Paper servers.
• Remember Discord or voice chat used alongside the game has its own settings.

Step 7: check each child's Microsoft account

Minecraft Java uses Microsoft accounts, and child accounts follow Xbox privacy settings. If a child sees:

Multiplayer is disabled. Please check your Microsoft account settings.

a parent needs to allow it:

1. Sign in to the Microsoft Family Safety website or the Xbox app as the parent.
2. Select the child's account.
3. Under Xbox privacy settings, allow You can join multiplayer games.
4. Restart Minecraft and the launcher.

You can also choose whether they can chat with people outside their friends list there.

Step 8: back up before every big change

Take a backup before letting kids loose in a new area, before adding mods and before updates. If something goes badly wrong, restoring yesterday's world is quicker than any rollback. See how to back up a game server.

Mixed devices: tablets, Switch and Xbox

Java Edition only runs on computers. If some kids play on tablets, phones or consoles, run a Bedrock server instead, or add Geyser to a Java server. Minecraft Java vs Bedrock server explains the choice. The same ideas apply on Bedrock: allowlist, verified Xbox accounts, and permissions.

A safe family server without the setup

A GamezServers Minecraft server is live within about a minute of paying, with its own address, so there is nothing to install on a family PC and no ports to open on your router. Paper is available as a server type for CoreProtect and other plugins, server.properties is editable in the file manager, and the console takes every command above. One click backups are stored off the server, and Sleep when empty can stop the server after 4 days with nobody on, so it is not running while the kids are away at camp. Plans start small: a few kids on vanilla or Paper need very little memory. See Minecraft server plans or our page on running your own family world instead of a subscription one.

FAQ

Is a private Minecraft server safe for kids?

With a whitelist and online-mode on, only players you approve can join, which makes it much safer than public servers. Keep op for adults and back up regularly.

How do I stop strangers joining my Minecraft server?

Turn on the whitelist with whitelist on, add players with whitelist add Name, and set enforce-whitelist=true. Keep online-mode on.

Why does my child see "Multiplayer is disabled"?

Their Microsoft account's Xbox privacy settings block multiplayer. A parent can allow "You can join multiplayer games" in Microsoft Family Safety or the Xbox app.

How do I undo griefing on a Minecraft server?

Install CoreProtect on a Paper server, then use co rollback with the player's name and a time range to undo their changes.

Should kids have operator permissions?

It is safer not to. Ops can run every command, including banning others and changing the world. Give specific abilities through a permissions plugin like LuckPerms instead.