Bedrock "You Need to Authenticate to Microsoft Services" Fix
Why a Minecraft Bedrock server rejects players with "You need to authenticate to Microsoft services", and how to fix it on PC, console and phone.
Updated Oct 7, 2026 · 6 min read
On this page
"You need to authenticate to Microsoft services" means the Minecraft Bedrock server asked your game to prove who you are and your game could not. Bedrock servers check every player against their Microsoft account (Xbox network) when online-mode=true, which is the default and the right setting. So the problem is almost always on the player's side: not signed in, a stale sign in, a wrong device clock, or an account that needs attention. Signing out and back in, then fixing the clock, clears most cases.
Older versions show the same thing as "You need to authenticate to Xbox Live". It is the same check with the old branding.
Who is affected tells you where to look
| Who gets the error | Likely cause | Where to fix |
|---|---|---|
| One player, every server | Their sign in or account | That player's device |
| One player, only on Switch or PlayStation | Microsoft account not linked on that console | That console |
| Everyone at once | Xbox network outage | Wait, check the status page |
| Everyone, only on your server | A proxy, Geyser setup or changed server setting | The server |
If one friend gets it and the rest of the group plays fine, the server is doing its job. Do not change the server to "fix" one player.
Fix 1: Sign out and back in
In Minecraft, open Settings > Account (on some versions Profile > Settings) and choose Sign out of your Microsoft account. Close the game fully, open it again and sign in. On the main menu your gamertag should appear at the top of the screen. If it says Sign in for free, you are not signed in and no server with online mode will accept you.
On Windows, sign in through the Xbox app as well. Minecraft for Windows reads the account from Windows, and a signed out Xbox app is a common cause of the error.
Fix 2: Set the clock to automatic
Microsoft sign in uses tokens with timestamps. A device clock that is a few minutes off makes those tokens look expired or not yet valid, and authentication fails without telling you why.
- Windows: Settings > Time & language > Date & time. Turn on Set time automatically and click Sync now.
- Android and iPhone: turn on automatic date and time in the system settings.
- Xbox, PlayStation and Switch: set the system time to sync from the internet.
Restart Minecraft after changing the time.
Fix 3: Check the Microsoft account itself
Open account.microsoft.com in a browser and sign in with the same account. If Microsoft asks you to verify an email, add a phone number, accept new terms or confirm your identity, the game sign in can fail quietly until you do. Finish those prompts, then sign in again in Minecraft.
For a child account, a parent may need to approve multiplayer. A blocked setting usually gives a different message about multiplayer being disabled, but it is worth checking the Xbox privacy and online safety settings for You can join multiplayer games at the same time.
Fix 4: Console specific steps
Nintendo Switch: Bedrock on Switch needs a linked Microsoft account for any online play, including servers. From the main menu choose Sign in for free, go to microsoft.com/link on a phone or PC and enter the code shown. If it was linked before and now fails, sign out in the game's settings and link again.
PlayStation: same flow as Switch, the console shows a code to enter at microsoft.com/link. A PlayStation Plus subscription is also needed for online play on PlayStation.
Xbox: you are already signed in through the console. A Game Pass membership (Essential, formerly Core, or higher) is required for online multiplayer, and an expired one can show up as sign in trouble in Minecraft.
Adding a server by address on console needs one of the workarounds in joining a Bedrock server on Xbox, PS5 or Switch. Those workarounds do not change the authentication step, so the player still needs to be signed in.
Fix 5: Windows components
When Fix 1 and 2 do not help on a PC:
- Open the Microsoft Store and update Gaming Services and Xbox Identity Provider. Minecraft relies on both for sign in.
- Open Settings > Apps > Installed apps, find Minecraft, open Advanced options and click Repair. Use Reset only if repair does not help, since it removes local settings.
- Turn off VPNs and any DNS filtering for a test. Some block the Microsoft login domains Minecraft calls.
Fix 6: Check for an outage
If several people on different devices hit the error at the same time, Xbox network sign in may be down. Check the official status page at support.xbox.com (Xbox status). Nothing on the server side fixes an outage, and it usually clears on its own.
What to check on the server
The server does not sign in to anything, it only checks players. Open server.properties and confirm:
online-mode=true
allow-list=true
Leave online-mode=true. Setting it to false stops the server checking accounts at all, so anyone can join under any name, including the name of an operator on your server. Your allowlist and permissions are only safe with online mode on.
If you run Geyser to let Bedrock players into a Java server, the Bedrock side still uses Xbox sign in, while Java side authentication is handled by the Java server or Floodgate. See letting Bedrock players join a Java server for that setup.
When a player connects fine but is then refused, check the console. A refused allowlist join shows a different message ("You are not invited to this server"), and an outdated client gets "Outdated client". Those have their own fixes, for example the outdated server guide.
On a hosted server
On a GamezServers Bedrock server, online mode is left on and the allowlist is a switch in the control panel with an Allowlist player button, so you can lock the server to your group without editing files. Players join with the server's own address on port 19132, which skips the router setup that home hosting needs. If you are setting one up for a mixed group of phones and consoles, the Bedrock crossplay server page covers what is included.
FAQ
Should I turn off online-mode to fix the authentication error?
No. It lets anyone join with any name, which breaks the allowlist and operator permissions. Fix the player's sign in instead.
Why can my friend join Realms but not my server?
Realms and servers use the same sign in, so a working Realm usually means the account is fine. Check the server address and port, and the allowlist. A rejected allowlist join gives a different error message.
Do players need Xbox Game Pass to join a Bedrock server?
On Xbox, yes, online multiplayer needs Game Pass Essential or higher. On PlayStation you need PlayStation Plus. On Switch you need Nintendo Switch Online. PC and phones need only the free Microsoft account.
Does the error mean my server is broken?
Rarely. If other players can join, the server is working. It points to the account or device of the player who sees it.
Skip the setup. Your own Minecraft Bedrock server.
Then $4.99/mo. Just trying it? $1.25 for 3 days