Skip to main content

​
Managing Global Access Control in Embervale

Establishing absolute control over who can enter your world is a fundamental requirement for maintaining a positive and secure community experience. During the current Early Access phase of Enshrouded, the technical management tools provided by the game engine are purposefully streamlined. While traditional features like persistent SteamID whitelists are still in development, server administrators can implement several effective strategies to safeguard their progress and participants. This guide walk you through the current technical security methodologies on the FREAKHOSTING platform.

Difficulty

Beginner

Time

3 Minutes

​
Current Technical Security Methodologies

The Enshrouded engine primarily uses a “Single-Gate” authentication model to manage server traffic.
The most reliable and officially supported security measure is the server-wide password defined within your enshrouded_server.json configuration. This requires every participant to provide a matching security key during the connection handshake.

​
Community Security Alternatives

For administrators requiring more granular moderation, such as individual player restrictions or IP-level blocking, we recommend exploring these community-vetted alternatives.
The Enshrouded community has developed several specialized “Wrappers” that encapsulate the server executable. These tools intercept network events to provide extended administrative features, including real-time player auditing and persistent ban registries.
Advanced administrators can manually inspect the /savegame/ metadata to identify unauthorized participants. While this does not provide real-time whitelisting, it allows for post-incident analysis and identification of specific player identifiers for future exclusion.

​
Future Feature Roadmap

Keen Games (the developer of Enshrouded) has publicly stated that more strong administrative frameworks and official SteamID whitelisting (whitelist.json) are significant priorities on their technical roadmap. We recommend maintaining a strong, unique password as your primary defensive perimeter until these native features are released.

​
Need Extra Help?

If you encounter any issues, our support team is ready to assist:

​
Save on Your Hosting

Ready to get a new server? Use code KB20 at checkout for 20% off your first month!
Last Updated: January 2026 | Enshrouded: Security overview.