Is Aternos safe? Mostly yes, and no, it isn't a virus. Aternos is a website you log into and a control panel in your browser, run by a registered German company, Aternos GmbH. It isn't a program you install. It's free because it runs ads. The catches are the ones you'd expect from a free host: queues, a server that shuts down once everyone leaves, limited performance, and a world that's your job to back up. As of October 2026, that's the picture.
So the practical version: sign up through the real site (aternos.org), don't download anything that claims to be an "Aternos client", turn on the whitelist, keep backups, and only install mods and plugins from places you'd trust with your PC. The rest of this page is the detail, including a section for parents.
Is Aternos a virus?
No. The sign-up flow is an account, a web panel, and a server address you give your friends. It's a website you log into, not a program you install. I'm not a malware scanner, but nothing about how the service works asks you to put software on your PC. If a site asks you to download an Aternos app, close the tab.
Aternos does run Java Edition, Bedrock Edition and Hytale servers, with plugins, mods and modpacks. Those are things you add to your server, on Aternos' machines. That's where the real risk sits, and it's covered below.
Is Aternos legit? Why it's free
Its homepage says it's free "forever" and that there's no way to pay for anything. The money comes from ads. An Aternos team member said so on the old forums back in 2021, and the privacy policy names an ad provider, Publisher Collective Ltd. Ad consent is asked for separately on each visit, and you can change it in your account settings.
The company details are public too: the legal entity, the address and a named managing person are all in the terms and privacy policy, and there's a status page. That's what a real hosting business looks like.
One ad-related thing to know: the site detects ad blockers, and the privacy policy says it may change what you see or restrict access if you don't agree. If you hit a wall, that's probably why.
The real catches of free Aternos
- The queue. When the servers are full, you wait. You see your position and an estimated wait. Leave the queue and you lose your place. Near the front you have to click a green confirm button, or you're removed and have to start over. After that the server starts within a few minutes.
- It shuts down when it's empty. The server stops shortly after the last player leaves. The terms ban bots, fake players and auto-reconnect tricks that try to keep it alive, so don't bother.
- Performance. Aternos' own help page says the service is "made for private use in a small environment", not for complex setups with multiple worlds. It specifically warns against thousands of TNT blocks, millions of WorldEdit blocks, giant modpack machines and piles of plugins. For a handful of friends, great. For a big public server, no.
- Inactive servers get deleted. The terms say that usually happens after about 3 months without activity, "but this can change without notice". Starting the server counts as activity. Opening the website or changing settings doesn't. Once a server is deleted, its address can be taken by someone else.
- No commercial servers. The terms ban commercial use. Making videos about your server is explicitly fine.
If those are dealbreakers, jump to when Aternos isn't the right choice.
Can Aternos leak your IP?
Short version: the address you hand your friends is an Aternos one, something like yourname.aternos.me, not your home connection. Players join Aternos' machines, not your PC.
The part people panic about is logs. An Aternos server can write player IP addresses, yours and your friends', into its log file. Aternos' privacy policy says this directly. It also says the log is overwritten every time the server starts, and you can wipe it by reinstalling the server. Who can see it? You, and anyone you've given shared access to. It's not something Aternos publishes.
On the website side, the privacy policy says it keeps each request, IP included, for up to 24 hours to spot and block attacks, and that it never keeps your IP long term. The site also sits behind Cloudflare, and the homepage lists DDoS protection as a free feature.
The sensible habit: only give shared access to people you'd trust with a friend's IP, because that's about what it is.
Is my world safe on Aternos?
This is the one where I'd be careful. Aternos' own "Keep your world safe" page is blunt: it manages thousands of servers, so data can be lost, and if you haven't downloaded your world, losing it is "simply your fault". The terms say the same thing in legal language: partial or total data loss is possible, and backups are your responsibility.
So treat your world like a save file you care about:
- Link Google Drive backups. You can make them by hand or turn on automatic backups each time the server stops. Automatic ones are capped, and older ones get deleted as new ones come in. A backup includes the world, player data, settings and your plugins, mods and datapacks.
- Download the world yourself with the light-blue download button. It works while the server runs. Download before you stop it.
- Restoring replaces everything on the server, world included. Generating a new world or reinstalling deletes the current world too.
- Don't overload it. Aternos lists overloaded servers as one of the ways worlds get lost, so go easy on giant modpack machines, mass WorldEdit jobs and piles of plugins.
- Don't spam the stop button or other controls.
Backups sitting in your Drive survive even if the server is deleted. Aternos just says it doesn't guarantee they'll keep working.
Plugins and mods are your risk
The terms are clear: you can install third-party plugins, mods and add-ons, but Aternos can't guarantee they're functional, up to date or safe. You're told to get them from trustworthy sources, and support doesn't cover them. A bad plugin can wreck your world even if the host is fine. I'd stick to well-known authors and sites, and read whether CurseForge is safe if you're picking mods there. The same goes for people: anything another user does on your server with shared access is final. The terms say those actions "cannot be undone or tracked", so share access sparingly.
What data does Aternos collect?
Here's what the privacy policy says, as of October 2026:
- Account: a username and password, or a linked Google account. Email is optional and used for notifications and password resets, not newsletters. Skip the email and there's no password reset, so I'd add one.
- Passwords: hashed in your browser first, then hashed and salted on the server. Two-factor authentication is available for password logins. Turn it on.
- Server stuff: your settings and files, which players are online, and short-lived event logs, kept from 24 hours to 7 days depending on the type.
- Third parties: Google Analytics, Reddit Pixel (conversion tracking and retargeting ads on Reddit), Cloudflare, Publisher Collective for ads, plus services for email, support, captchas and hosting hardware.
- Closing your account: your data is deleted after 7 days, and logging back in within that window cancels it. You can also email privacy@aternos.org. Aternos can close accounts without giving a reason, too.
It's an ad-funded site with trackers. If that bothers you, manage the ad consent in your account settings.
Is Aternos safe for kids?
The site itself has ads and tracking, which is the main parent-relevant thing about Aternos. The privacy policy says you may only agree to it if you're at least 16 (or whatever your country sets), or if a parent or guardian consents. So if your kid is younger, make the account together.
After that, the question is really about Minecraft, not Aternos. Aternos doesn't describe any chat moderation, so who's on the server and what they type is up to whoever runs it. If your kid is the owner:
- Turn the whitelist on so only invited players can join. Bedrock calls it the allowlist.
- Leave cracked mode off. It makes the whitelist unreliable, because someone can pretend to be a player who's on it.
- Be picky about who gets shared access, and what mods or plugins go on.
For the Minecraft side, I've written about whether Minecraft is safe for kids and the parental controls you can set.
Aternos safety checklist
- Use aternos.org only. Don't install anything that claims to be an Aternos app.
- Add an email and switch on two-factor authentication.
- Link Google Drive backups, and download your world now and then.
- Whitelist on. Cracked mode off.
- Mods and plugins from trusted sources only.
- Share access with people you'd trust with your IP.
- Start the server every so often so it doesn't get deleted.
When Aternos isn't the right choice
Skip it if you want a server that's up all day, a big public server, heavy modpacks, a world you can't afford to lose, or anything commercial. Aternos' own queue help page points to exaroton, a paid host from the same team with no queue. I've compared the options in my guide to Aternos alternatives and the wider look at free Minecraft server hosting. If you'd rather run it on your own PC, here's how to make a Minecraft server, and if you're weighing a paid plan, here's what a Minecraft server costs.
Aternos FAQ
Is Aternos safe to use?
Yes, for a small private server, as long as you keep your own backups and are careful with mods and who you share access with.
Is Aternos really free?
Yes. It says there's no way to pay for anything, and the ads cover the cost. You pay in queues and limits.
Is Aternos bad hosting?
It's free hosting, with free hosting's limits: limited resources, an empty server that stops, and a queue when it's busy. Fine for friends, not for a community.
Can I lose my server?
Yes, to data loss or to inactivity deletion. That's why backups matter.
Want to run your own server one day?
Folly is a free standalone multiplayer voxel game for PC with an early access date of October 16, 2026. Player-hosted servers are planned for early access, and you can read the details on the hosting and creators page.