You do not need to rent a server, pay for a Realm, or touch your router to play a world with friends over the internet. Your own computer can host it, and a few free tools hand your friends an address they paste straight into Minecraft. Here is how each option works, what your friends have to install, and which one to pick.

How playing without a server works

Friends joining you over the internet normally means an incoming connection to your house, which is why hosting usually involves renting a server or opening a port on your router. Every method on this page avoids that. Your computer makes an outbound connection to a relay instead, which your router already allows, and your friends connect to the relay.

That has three useful consequences: nothing has to be opened, your home IP address is never handed out, and it works behind CGNAT — the shared-address setup many mobile, satellite and fibre providers use, where port forwarding simply cannot work. If you would rather open a port the traditional way, see how to port forward a Minecraft server.

Which method should you use?

Ways to let friends join a server on your PC without port forwarding
MethodWhat friends installWorks behind CGNATCostBest for
e4mc (client mod)NothingYesFreePlaying your own world with friends, right now
Essential Mod (client mod)Essential ModYesFreeModded worlds where everyone already uses mods
Tunnel service (playit.gg and similar)NothingYesFree tierA real server.jar you want a permanent address for
Private network app (Tailscale, Radmin VPN, ZeroTier, Hamachi)The same appYesFree tierA private group, maximum privacy
Rented server hostNothingYesPaidA server that stays up when your PC is off
Minecraft RealmsNothingYesPaidSmall groups who want zero setup

Host your own free Realm with e4mc

A Realm is Mojang's hosted world for a small group of friends. e4mc gives you the same feel for free: you keep your world on your own computer, and the mod hands out a public address while you play. The trade-off is that the world is only online while your game is open.

e4mc is a client-side mod for Fabric, Quilt, Forge and NeoForge. Only the host installs it. This is the short version; the e4mc guide covers the commands, the whitelist problem and every common error.

  1. Install a mod loader

    Install Fabric or NeoForge for your Minecraft version, then create a launcher profile that uses it.

  2. Add the mod

    Download e4mc for your loader and version from Modrinth or CurseForge and drop the .jar into your mods folder.

  3. Open your world to LAN

    Start the game with that profile, load your world, press Esc and choose Open to LAN, then Start LAN World.

  4. Copy the address

    Instead of only a LAN port, the chat shows a public address ending in e4mc.link. It is already copied to your clipboard.

  5. Send it to friends

    They add it under Multiplayer → Add Server like any other server. They do not need e4mc or any mod, as long as their game version matches yours.

Essential Mod does a similar job and adds friends lists and invites, but everyone who joins needs Essential installed too. That is fine for a modded group and awkward for a friend on a vanilla launcher.

Use a tunnel service for a real server

If you run an actual server jar (Paper, Fabric, Vanilla, Bedrock Dedicated Server) a tunnel service is the closest thing to port forwarding without the router. You run a small agent next to the server; it dials out to the provider, and the provider gives you a public address that relays back to you.

  1. Get the server working locally first

    Start the server and join it from the same computer using localhost. If that fails, fix the server before adding a tunnel. New to running one? See how to make a Minecraft server.

  2. Create a tunnel

    Sign up with a tunnel provider such as playit.gg, install its agent on the server computer, and create a tunnel for Minecraft Java (TCP 25565) or Minecraft Bedrock (UDP 19132).

  3. Point it at your server

    Set the local address to 127.0.0.1 and the port your server actually uses. If you changed server-port in server.properties, use that number.

  4. Share the address it gives you

    You get something like example.gl.at.ply.gg:12345. Friends paste the whole thing, port included, into Add Server.

  5. Check it from outside

    Paste the address into our Minecraft server status checker. It connects from our servers, not your network, so a green result means friends can get in.

Use a private network app (the most private option)

A private network app puts your computer and your friends' computers on one virtual network, as if you were all on the same Wi-Fi. Nothing is exposed to the public internet at all: there is no address a stranger could scan or find. It is the safest of these options, and the only one where the server is genuinely invitation-only at the network level.

The cost is that everyone installs the app and joins your network before they can connect.

  1. Pick an app

    Tailscale, ZeroTier, Radmin VPN and Hamachi all do this. Tailscale and ZeroTier work on Windows, macOS, Linux and phones; Radmin VPN is Windows only.

  2. Install it on the server computer

    Sign in and let it join your network. Note the private address it gives you, usually starting 100., 25. or 26. depending on the app.

  3. Invite your friends

    Send the invite link or network ID. They install the same app and join, which is the point where you control who gets access.

  4. Start the server

    Run the server normally. Leave server-ip blank in server.properties so it listens on every address, including the virtual one.

  5. Have friends connect

    They use your private address in Add Server, for example 100.64.12.8. Add :25565 only if you changed the port.

Can you use Cloudflare Tunnel or try.cloudflare.com?

This comes up constantly, because a Cloudflare quick tunnel is free, needs no account and takes one command. For a Minecraft server, the honest answer is no, not in a way worth recommending.

Quick tunnels (try.cloudflare.com) are HTTP only

The cloudflared tunnel --url http://localhost:8080 command that gives you a free trycloudflare.com address is documented for HTTP traffic. Minecraft does not speak HTTP; it has its own protocol over TCP on port 25565 (or UDP 19132 on Bedrock). A quick tunnel cannot carry it, so there is no free Cloudflare address you can simply hand to a friend.

The full product can forward TCP, but every player needs cloudflared

A named Cloudflare Tunnel can publish an arbitrary TCP service. The catch is on the other end: each player must install cloudflared themselves and run cloudflared access tcp --hostname mc.example.com --url localhost:25565, leave it running, and then connect to localhost:25565 in Minecraft. A mod called Modflared automates that, but then everyone needs the mod — at which point e4mc is simpler and needs nothing from them.

It needs a domain on Cloudflare and a Zero Trust setup

Named tunnels are not the one-command quick tunnel. You need a domain with its DNS on Cloudflare, a tunnel created in Zero Trust, and a public hostname or private network route configured for it.

Game traffic is not what the free plan is for

Cloudflare's self-serve terms restrict using the free service to proxy large amounts of non-HTML content such as game traffic. Proxying raw TCP for players at scale is a Spectrum feature on enterprise plans, not something the free tier is meant to cover.

Keep the server safe once friends can reach it

Skipping port forwarding hides your home IP, but the server itself is still reachable by anyone holding the address. The same rules apply:

  • Turn on the whitelist. This is the single most effective control. See the whitelist guide; with it on, a leaked address is harmless.
  • Keep online-mode=true so every player signs in with a real Microsoft account and nobody can join as you.
  • Treat the address as private. Tunnel addresses get shared, scraped and scanned like any other. If it leaks, most services let you rotate it.
  • Op nobody you would not trust with the world file. Operators can change anything; the server commands guide covers op and deop.
  • Back up the world before you let anyone in, and keep the server software updated.
  • Download agents and mods from official sources only — Modrinth, CurseForge, or the provider's own site.

Friends still cannot connect

Connection refused

The tunnel or app is running but the server is not, or it is on a different port. Confirm the server is up by joining with localhost on the host computer, and check the port matches server-port in server.properties. More causes: how to fix connection refused.

Connection timed out

Traffic is not reaching the server process. Allow Java through the host firewall for the network type in use, and make sure server-ip is blank in server.properties. More causes: how to fix connection timed out.

They see "Outdated client" or "Outdated server"

Versions must match. Current versions word it "Incompatible client! Please use" followed by the version the world runs. With e4mc, friends need the same Minecraft version you opened the world on, even though they do not need the mod.

Only some friends get in

With a private network app, the ones who fail have usually not accepted the invite or are not connected. With a tunnel, check whether the free tier caps concurrent players.

It worked yesterday, not today

Free tunnel addresses can change when the agent restarts. Re-copy the current address, or claim a fixed one if the provider offers it. e4mc addresses change every session by design.

Everything connects but sign-in fails

If players reach the server and see "Failed to verify username", the connection is fine and the server could not reach Mojang. Check the Minecraft authentication server status.

Once the server is stable and you want players beyond your friends, you can add it to our server list so people can find it.

Playing without a server: questions

How can I play Minecraft with friends without a server?

Open your own world and share it with a tool that gives it a public address. e4mc is the simplest: install the mod, choose Open to LAN, and it prints an address your friends paste into the multiplayer screen. They do not need the mod, and nobody has to rent a server or change a router setting.

Can I host a Minecraft server without port forwarding?

Yes. A client mod such as e4mc, a tunnel service such as playit.gg, or a private network app such as Tailscale all let friends connect to a server on your PC without any router changes, because your computer makes an outbound connection to a relay instead of accepting an incoming one.

Can I use Cloudflare Tunnel for a Minecraft server?

Not practically. The free try.cloudflare.com quick tunnels only carry HTTP, and Minecraft is not HTTP. A full named tunnel can forward TCP, but every player must install cloudflared and run a command before they can join, it needs a domain on Cloudflare, and proxying game traffic is not what the free plan is intended for.

Does hosting without port forwarding hide my IP address?

Yes. With a tunnel service, players connect to the provider's address and never see yours. With a private network app, nothing is published publicly at all. Port forwarding, by contrast, means everyone with the address knows your home IP.

Is playit.gg safe?

The agent relays all traffic between your server and your players, so you are trusting the provider with that traffic and running its software on your machine. Download it from the official site, keep the whitelist on, and do not run it on a computer holding anything sensitive.

Do my friends need to install anything?

With e4mc or a tunnel service, no — they paste an address into the normal multiplayer screen. With Essential Mod or a private network app, yes: everyone needs the same mod or app.

Can I make a free Minecraft Realm?

Realms itself is a paid Mojang service, but e4mc gives you the same result for free: your own world, a shareable address, friends joining from anywhere. The difference is that your world is only online while your game is running, whereas a Realm stays up.

Does this work behind CGNAT?

Yes. Every method here relies on an outbound connection from your computer, which works the same behind carrier-grade NAT. That is the main reason to use one.

Does this work for Bedrock Edition?

Tunnel services and private network apps work with Bedrock Dedicated Server, using UDP port 19132 instead of TCP 25565. Mods like e4mc are Java Edition only.