How to Make a Safe Minecraft Server for Kids

A safe Minecraft server for kids is a private server that only people you know can join: the whitelist is on, online-mode checks every account, you keep operator powers to yourself, and plugins let you undo griefing in seconds. Add the family settings on your child's Microsoft account, which decide whether they can play multiplayer and who can message them, and you have a setup you can trust without hovering over the screen.

None of this needs advanced skills. Below is the checklist we would use for our own kids, with the exact settings, the commands to type, and the plugins that do the heavy lifting. Everything is based on the official Minecraft help pages and the Minecraft Wiki.

Why a private server is the safer choice

Minecraft is rated PEGI 7 and ESRB Everyone 10+, according to the official parents' guide, and the game itself is mild. The risk on public servers is the people: strangers in chat, players who destroy builds, and rules you did not choose. A private server flips that around. You decide who joins, which features are on, and what happens when something goes wrong.

Where the server runs matters too. A server on your home PC means sharing your home IP address with every player, opening ports on your router, and leaving the computer on whenever the kids want to play. A hosted server gives players the server's address instead of yours.

Minecraft server for kids: the safety checklist

These are Java Edition settings from server.properties and game rules, with what each one does. The defaults come from the Minecraft Wiki.

white-list=true
enforce-whitelist=true
online-mode=true
enforce-secure-profile=true
difficulty=easy
spawn-protection=16
hide-online-players=true

Edit the file with the server stopped, then start it again. The game rules go in the console:

whitelist add ChildUsername
whitelist add FriendUsername
op ParentUsername
gamerule pvp false
gamerule mob_griefing false

Whitelist and operators: who gets the keys

The whitelist is your guest list. Add your child and each friend by their exact Minecraft username; the player does not need to be online. Our guide to the Minecraft server whitelist covers every command and how to fix names that will not add.

Operators are a different matter. In Java, operators can always connect even if they are not on the whitelist, and level 4 (the default for /op) can run every command, including stopping the server. Keep level 4 for the parent. If an older child wants to help, give them level 1 or 2 in ops.json instead. The full table is in how to OP yourself on a Minecraft server.

Chat on a kids' Minecraft server: what you can control

Vanilla Java has no single switch that turns chat off for everyone, but you have several layers:

If you do not want private messages on the server, a permissions plugin can take that one command away while normal chat stays visible to everyone, which makes it easy for you to read along:

lp creategroup kids
lp user ChildUsername parent add kids
lp group default permission set minecraft.command.msg false

Protection plugins: CoreProtect, GriefPrevention and LuckPerms

Plugins need Paper (or Purpur) instead of the vanilla server. Our guide to installing plugins on a Paper server shows how. These three cover what parents usually worry about:

CoreProtect is the "undo button". Turn on inspect mode and click a block to see who changed it, or preview a rollback before you apply it. This example rolls back what one player did in the last two hours within 30 blocks of you:

co inspect
co rollback u:PlayerName t:2h r:30 #preview
co rollback u:PlayerName t:2h r:30
co undo

GriefPrevention also has chat tools for parents: it blocks spam and caps, /SoftMute quietly limits a player's messages to other muted players, and /Separate makes two players ignore each other. Before installing any plugin, check that its download page lists your Minecraft version: at the time of writing, GriefPrevention and LuckPerms listed 26.3 on Modrinth and CoreProtect listed up to 26.2.

Parental controls on the Microsoft account

Java and Bedrock both sign in with a Microsoft account. The official parental controls page explains that child accounts are those under 16 in the US and EU (19 in South Korea), and only the parent account can change their settings:

1. Go to account.xbox.com/settings and pick your child's account. Their gamertag shows in the top right.
2. Open Online Safety and set "You can join multiplayer games" to Allow. Without it, your child cannot join any server, including yours.
3. Open Privacy and set "Others can communicate with voice, text, or invites" to Everyone, Friends or Block.
4. Keep the game up to date. Minecraft added player safety features from version 1.16.4 onward and does not provide parental controls for older or modded versions.

On Nintendo Switch, PlayStation and Chromebook, the platform has its own parental controls on top of this. For anything those tools cannot handle, Minecraft has a Report a Concern form.

If your kids play on a tablet or console (Bedrock)

Phones, tablets, Xbox, PlayStation and Switch run Bedrock Edition, which uses its own server and slightly different names. The safe values in Bedrock's server.properties:

allow-list=true
online-mode=true
default-player-permission-level=member
chat-restriction=None

allow-list replaced white-list in Bedrock 1.18.10, and players are added with allowlist add <name>; unlike Java, operators must be on the list too. default-player-permission-level accepts visitor, member or operator, so never leave it on operator. chat-restriction can be None, Dropped (messages are never delivered) or Disabled (the chat box does not appear for non-operators). To connect from a console, follow how to join a Bedrock server on Xbox, PlayStation and Switch.

A simple routine for parents

Settings do most of the work, but a five-minute habit helps. Take a backup before every update or new plugin. Restart the server on a schedule so it stays fast. Read the console or the files in the logs folder now and then, where joins and chat messages are recorded. And agree on a few rules with your kids, like "no building in someone else's area without asking", then put them in the code of conduct so every friend sees them.

A kids' Minecraft server that runs itself with TheGameHosting

A TheGameHosting Minecraft server takes the technical part off your plate. It is ready about 60 seconds after payment and stays online 24/7, so the kids can play after school without your PC running, and nobody needs your home IP or an open port on your router: friends join with the IP and port shown in the panel. DDoS protection is included. From any browser you edit server.properties in Files, add players to the whitelist in Console, switch to Paper with the Version Changer, install CoreProtect, GriefPrevention or LuckPerms with the Plugin Installer, and set nightly Backups and restarts with Schedules.

If you want a private world for your kids and their friends that you control, pick a plan on our game server plans and pricing page. Minecraft runs from the 2 GB plan at $1.90 a month, with unlimited slots, no setup fee and cancel any time, and code FULL2026 takes 15% off for life. Our support team is on chat, email and tickets 24/7 if you get stuck on any step.

FAQ

Hosting for these games

• Minecraft Java hostingWhitelist, plugins and backups
• Minecraft Bedrock hostingTablets, phones and consoles