What Is RCON? How to Set Up Remote Console Safely on a Game Server

RCON (remote console) is a way to send console commands to a game server over the network, protected by a password: kick or ban players, broadcast messages, save the world, or restart, without being on the machine or in the game. You enable it in the server config with a port and a password, then connect with a tool like rcon-cli, mcrcon or a web panel. Because most RCON protocols send everything unencrypted and anyone who guesses the password gets full control, use a long random password, keep the port closed to the public where you can, and never reuse the password elsewhere.

What RCON can do

Anything the server console can do, RCON can usually do. Common uses:

• Kick, ban and unban players.
• Send messages and restart warnings.
• Save the world before a backup or restart.
• Change settings or time of day on the fly.
• Feed bots and dashboards: Discord bots, player count trackers and admin tools all use RCON.

That power is the risk. Someone with your RCON password can wipe the world, ban everyone or give themselves anything.

How the protocols differ

There is no single RCON. Games use one of a few families:

None of the common ones encrypt traffic. Anyone who can watch the network path can read the password. That matters most on public Wi-Fi or shared networks, much less between your own PC and a hosted server.

Enabling RCON in popular games

Minecraft: Java Edition (server.properties):

enable-rcon=true
rcon.port=25575
rcon.password=use-a-long-random-password

Rust (launch parameters):

+rcon.port 28016 +rcon.password "long-random-password" +rcon.web 1

ARK: Survival Ascended (GameUserSettings.ini, [ServerSettings]):

RCONEnabled=True
RCONPort=27020
ServerAdminPassword=long-random-password

ARK uses the admin password for RCON too, so anyone with it can also use admin commands in game.

Palworld (PalWorldSettings.ini, inside OptionSettings):

RCONEnabled=True,RCONPort=25575,AdminPassword="long-random-password"

Conan Exiles (Game.ini):

[RconPlugin]
RconEnabled=1
RconPassword=long-random-password
RconPort=25575

7 Days to Die (serverconfig.xml):

<property name="TelnetEnabled" value="true" />
<property name="TelnetPort" value="8081" />
<property name="TelnetPassword" value="long-random-password" />

With an empty telnet password, 7 Days to Die only listens on the machine itself, which is a sensible default. Our 7 Days to Die admin commands guide covers the commands.

DayZ (battleye/BEServer_x64.cfg):

RConPassword long-random-password
RConPort 2306

For Counter-Strike 2, see the dedicated CS2 RCON guide.

Connecting

• rcon-cli (gorcon, works with most Source RCON games): rcon -a 203.0.113.10:25575 -p yourpassword "list"
• mcrcon for Minecraft: mcrcon -H 203.0.113.10 -P 25575 -p yourpassword "say Restart in 5"
• RustAdmin or the in browser WebRCON tools for Rust.
• BattleMetrics RCON supports many games including Rust, ARK, DayZ and Squad.
• DaRT or BattleMetrics for BattlEye RCon on DayZ.
• telnet for 7 Days to Die: telnet 203.0.113.10 8081, then type the password.

Setting it up safely

1. Use a long random password. At least 20 characters from a password manager. RCON passwords get brute forced. Never reuse your admin, Steam or email password.
2. Only enable it if you use it. If you never use RCON, leave it off.
3. Do not forward the RCON port at home unless you need remote access. If you run tools on the same machine, RCON does not need to be reachable from the internet at all.
4. Limit by IP where you can. A firewall rule allowing only your own IP to the RCON port stops strangers from even trying. On Linux with ufw: sudo ufw allow from 198.51.100.7 to any port 25575 proto tcp.
5. Use the built in lockouts. Source games have sv_rcon_maxfailures and sv_rcon_banpenalty, which ban IPs after too many wrong passwords.
6. Do not leak it. Passwords end up in screenshots of configs, shared panel access, Discord bot setup messages and public GitHub repos. Rotate it if you think it has been seen.
7. Give bots their own access where the game supports it, and remove access for tools you stop using.

RCON vs in game admin

RCON is for remote and automated control. For day to day moderation, in game admin roles are often safer, because you can give a moderator kick rights without handing over the master password. Our guide to game server admin roles and permissions covers how to split those powers.

RCON on a hosted server

On a GamezServers server you have a live console in the control panel, so you can run commands without RCON at all. Where a game's server template includes RCON settings, such as the RCON port and enable switch for Palworld or the RCON password for Rust, they are fields in the panel, and DDoS protection is always on. Bots and tools like BattleMetrics can then connect to the address and port shown there.

FAQ

What does RCON stand for?

Remote console. It is a protocol for sending server console commands over the network with a password.

Is RCON safe to use?

Yes, with a long unique password and the port limited to people who need it. Most RCON protocols are not encrypted, so avoid using them over untrusted networks.

What port does RCON use?

It depends on the game. Minecraft and Palworld default to 25575, Rust commonly uses 28016, ARK commonly uses 27020, and Source games use the game port over TCP.

Can I use RCON without opening a port?

Yes, if the RCON tool runs on the same machine or network as the server. You only need the port reachable from the internet for remote access.