Password Whitelist Script - Dual-Layer Server Protection for FiveM

This script gives you two ways to control who joins your server: a password system and an identifier whitelist. You can use one, both, or enable clever mode where players need either a password OR whitelist approval. It's straightforward server protection without complicated admin panels.

What's Included

You get a lightweight connection filter that runs before players even load into the server. It checks passwords and whitelisted identifiers (Steam, FiveM license, Discord, Xbox, IP) with configurable attempts and automatic kick messages. The whole thing is managed through a simple config file - no database, no web dashboard.

Key Features

• Password Protection - Set a server password that changes whenever you want (useful for beta testing or private events)
• Multi-Identifier Whitelist - Add Steam, license, Discord, Xbox, Live, or IP addresses to approved list
• Clever Mode - Players need password OR whitelist (not both), letting friends join without applications
• Attempt Limiting - Configurable wrong password attempts before kick (default: 3)
• Discord Redirect - Kicked players see your Discord invite for whitelist applications
• Toggle Options - Enable/disable password or whitelist independently in config

Perfect For

• Development servers that need quick password access for testers
• Whitelisted RP communities with application processes
• Private servers for friend groups (password mode only)
• Beta testing phases before public launch
• Servers transitioning from public to whitelist (use clever mode)

How It Works

When someone connects, the script checks if whitelist/password is enabled. If whitelist is on, it scans their Steam, license, Discord, Xbox, Live, and IP against your approved list. If password is on, they get prompted to enter it with X attempts. In clever mode, passing either check lets them in. Failed attempts show a kick message with your Discord link.

Technical Details

• Framework: Standalone (works with ESX, QBCore, or no framework)
• Performance: Runs only on connection events, zero in-game performance impact
• Configuration: Single config.lua file - no SQL, no admin commands
• Identifier Types: steam, license, xbl, live, discord, ip (all optional)
• File Size: Ultra-lightweight, minimal code

Installation

1. Download and extract to your resources folder
2. Open config.lua and set UseWhitelist and/or UsePassword to true/false
3. Set your password in Config.Password (change anytime)
4. Add whitelisted identifiers to Config.Whitelist array (Steam, Discord, etc.)
5. Configure attempt limit (how many wrong password tries before kick)
6. Add your Discord invite link to Config.DiscordLink
7. Add ensure password-whitelist-script to server.cfg
8. Restart server - players will be prompted on connection

Config File Example

-- Config
Config = {}
Config.UseWhitelist = false -- Use whitelist? Only people that are whitelisted are allowed to join.
Config.UsePassword = false -- Use password? If whitelist and password are true, you have to be whitelisted and know the password.
Config.Password = 'PASSWORD' -- Password
Config.Attempts = 3 -- How many attempts a user has to enter the correct password
Config.CleverMode = true -- Use clever mode? If this is true, you will have to either be whitelisted *or* know the password. Recommended.
Config.DiscordLink = 'https://discord.gg/gzkjNkU' -- Your Discord server invite link.
Config.Whitelist = { -- You normally only need one identifier per person.
    'steam:11000010a2324b4', -- Puntherline: Steam
    'license:145ebc08c3ab10a72172c4e98483a4329a3f876e', -- Puntherline: FiveM
    'xbl:2535410249652434', -- Puntherline: Xbox Live
    'live:1055521767134379', -- Puntherline: Live again?
    'discord:250304825902759936', -- Puntherline: Discord
    'ip:87.151.236.79' -- Puntherline: IP
}

Framework Compatibility

• ✅ ESX - Fully compatible, runs before framework loads
• ✅ QBCore - Works perfectly, connection filter is framework-agnostic
• ✅ QBOX - Compatible with all QB-based frameworks
• ✅ Standalone - Designed to work without any framework dependency

What Makes It Stand Out

Most whitelist scripts force you into one system - database management, Discord bots, or admin commands. This one is just a config file you edit. Need to add someone? Paste their identifier. Want to switch from password to whitelist? Toggle a boolean. The clever mode is particularly useful for servers that want whitelist roleplay but still let friends join easily. It's not trying to be a complex permission system - it's just access control that works.

Don't hesitate to ask if you have any questions regarding any script!

Related ESX Scripts

• FiveM Ambulance Job (ESX/QBCore)
• DebuX Radial Menu (2 Styles , Full Customizable)
• Energy Skins Weapons V2 - ESX - QBCORE
• Advanced Bank Robbery (T1ger)