RCON
Remote console: a protocol for sending console commands to a running server over the network, protected only by a password.
RCON stands for remote console. It lets a program connect to a running Minecraft server and send commands as if they were typed into the server console. Discord bots, web dashboards, backup scripts and tools like mcrcon use it.
Enabling RCON
RCON is off by default. In server.properties set:
enable-rcon=truercon.port(default 25575)rcon.passwordto a long, random password
broadcast-rcon-to-ops controls whether commands sent over RCON are shown to online ops. Restart the server after changing these values.
Why it matters for server owners
RCON has full console access: every command, including /op, /stop and anything plugins add. That is equivalent to the highest op level. At the same time the protocol is simple and not encrypted, and the password is its only protection.
That leads to a few firm rules:
- Only enable RCON if a tool actually needs it.
- Use a strong, unique password and never reuse your account passwords.
- Do not make the RCON port reachable from the whole internet. Restrict it with a firewall to the machines that need it, or keep it local.
- Change the password if it was ever shared in a screenshot, config dump or support chat.
RCON versus file access
RCON is for commands, not files. To upload plugins, edit configs or download backups, use SFTP instead.
Practical tip
If you need RCON for a bot, run the bot on the same machine or network as the server and let it connect locally. You get the automation without opening another port to the internet.