Make your server connection safer
Your server works on Tamerdeck right now — this is optional. But here's the thing worth knowing: by default, Palworld sends your server's admin password as plain text. If someone could watch the connection between us and your server, they could read it. Here's how to close that gap, easiest first. You only need one.
Easiest
Check your host, or just ask them
If you rent your server from a host (Shockbyte, GPORTAL, Nitrado, Indifferent Broccoli, and so on), the fastest path is to look in your host's control panel for anything about a firewall, allowed IPs, or HTTPS — or open a support ticket and ask: “How do I secure my REST API / admin API port?” Hosts deal with this all the time. It's a normal question.
If your host offers it
Turn on HTTPS, then flip the switch
Some hosts let you serve your server over HTTPS(a secure, encrypted connection — the little padlock). If yours does, turn it on, then open your server's Settings in Tamerdeck and switch on Reach the server over HTTPS. The warning disappears and your password is protected.
For technical users
Lock the door yourself
Comfortable running servers? Two solid options: keep the admin API listening only on the machine itself (localhost) and reach it through an SSH tunnel, or put a small reverse proxy (like Caddy or a Cloudflare Tunnel) in front to add HTTPS. Then turn on the HTTPS switch in Settings.
Not sure what any of that means? Totally fine — use the easiest option above, or leave it. Tamerdeck keeps working either way.