How to Make a Project Zomboid Server Private (Whitelist)

To make a Project Zomboid server private, set Open=false in servertest.ini so only accounts you create can join, then add each player with adduser "username" "password" in the server console. Set Public=false to hide it from the public server list, and optionally add a join password with Password=. Restart the server after editing the ini.

The four settings that make a server private

They live in Zomboid/Server/servertest.ini (named after your server). Stop the server before editing, because it writes the file back on shutdown.

Which ones you need depends on how private you want to be:

• Friends only, low effort: Public=false and a Password. Anyone with the address and password gets in.
• Real whitelist: Open=false and create an account for each player. Nobody without an account can join, even with the address.
• Belt and braces: both. Good for public communities that recruit through Discord.

How does the Project Zomboid whitelist work?

Project Zomboid does not have a separate whitelist file. Every player on a server has an account, a username and password stored in the server's database (Zomboid/db/servertest.db). With Open=true, a new account is created the first time someone joins with an unused username. With Open=false, only accounts that already exist can log in.

So "whitelisting" someone means creating their account.

How to add players to the whitelist

Run these in the server console (no slash) or in game chat as an admin (with a slash):

adduser "Gary" "S3curePass"

This creates the account Gary with that password. Send Gary both, and tell them to type exactly that username and password in the Join screen. Usernames are case sensitive.

Other useful commands:

A neat trick for switching an existing server to whitelist: while your group is online with Open=true, run addalltowhitelist, then set Open=false and restart. Everyone keeps their accounts and characters.

Join password vs account password

These get confused a lot:

• Server password (Password= in the ini) is shared. Everyone types the same one in the server's password box.
• Account password is per player, set the first time they join on an open server or by you with adduser. If a player forgets it, they cannot log in to their character.

If a player loses their account password on a whitelist server, remove the old account and create it again with adduser and a new password. Their character is tied to the username, but take a backup first in case.

Steam and username behavior

On Steam servers, accounts are also tied to the player's Steam ID. That stops someone using another player's username from a different Steam account. It also means one person cannot easily hand their account to a friend.

Hiding the server

Public=false keeps the server out of the in game Public list. Players then join with the IP and port from the Join screen's favorites. It does not hide the server from people who already know the address, which is why the whitelist exists.

Making it private on GamezServers

These are panel settings, so you never touch the ini:

• Whitelist only switches Open to false.
• Show in the public server list controls Public.
• Join password sets Password.

Then use the Add whitelisted account button in the console to run adduser with a username and password, and send them to your friend along with the address. The Make admin button gives your own account admin rights. Changes apply after a restart. The Project Zomboid quick start covers joining, and plans are on Project Zomboid server hosting. More admin commands are in Project Zomboid admin commands.

FAQ

What does Open=false do in Project Zomboid?

It turns on the whitelist. Only players with an existing account on the server can join. You create accounts with adduser.

How do I make my Project Zomboid server invisible in the server list?

Set Public=false in the server ini and restart. Players then join by IP and port.

Why can't my friend join my whitelisted server?

They have no account yet, or they typed a different username or password than the one you created. Usernames are case sensitive. Create it with adduser and have them copy it exactly.

Can I whitelist players without knowing their password?

Yes. Have them join once while Open=true, then run addusertowhitelist "name" while they are online, or addalltowhitelist. Then set Open=false.

Is a join password enough to keep a server private?

For friends, usually. But anyone who learns it can join and make an account. A whitelist with Open=false is the only way to control exactly who plays.