PDF download Download Article
Configure your router or computer to accept incoming connections
PDF download Download Article

Do you need to allow an application or service through your PC or Mac's firewall? If you're running a server, streaming, gaming, or using an app that requires a port to be open, we can help. Many ports are closed by default to prevent intrusion, but it's easy to open them. This wikiHow article will teach you how to open a port on Windows 10, Windows 11, Mac,, Linux, and even on your router . We'll also show you how to find out if ports are open and share helpful security tips from computer and tech specialist Luigi Oppido.

Quick Steps: Open a Port on Windows

  1. Open Windows Defender Firewall with Advanced Security.
  2. Go to Inbound Rules > New Rule .
  3. Select Port .
  4. Select TCP or UDP and enter the port or range.
  5. Select "Allow the connection."
  6. Name the firewall rule and click Finish .
Section 1 of 7:

Open Ports on Windows (Windows Firewall)

PDF download Download Article
  1. To access your firewall settings on Windows 10 or 11, follow these quick steps:
    • Press the Windows key on your keyboard or click the magnifying glass in your taskbar.
    • Type windows firewall .
    • Click Windows Defender Firewall with Advanced Security .
    • If prompted, enter your password to confirm.
  2. It's in the upper-left side of the window. [1]
    Advertisement
  3. You'll see this option on the right side of the window. [2]
  4. This will allow you to manually choose the ports you want to open.
    • If you are being told to open a port to use a specific application or play a certain game, Oppido recommends looking it up first. "If I'm being asked to open up a port, I do a quick Google search to see if that port is being used by any other services or protocols," he says. If the port number is commonly used for a certain program, make sure that program isn't something hackers are scanning for, as this could leave your system vulnerable.
  5. Check the TCP box or the UDP box.
    • Check your program's support documentation to ensure that you are using the correct protocol.
    • In most cases, if you're opening a port to run specific software, you're opening a TCP port.
  6. Make sure the "Specific local ports" option is selected, and then type the ports you need to open into the field. You can open multiple individual ports by separating them with a comma, and you can denote a range of ports by using a dash between the two ends of the range.
    • For example, you would type 8830 to open port 8830, 8830, 8824 to open both port 8830 and port 8824, or 8830-8835 to open ports 8830 through 8835.
    • If you are supposed to choose a random port, Oppido recommends selecting a port in the thousands because a lot of three-digit port numbers are used by other apps and services.
  7. It's at the bottom of the window.
  8. If this option isn't checked, click the checkbox before continuing. [3]
  9. These include the "Domain", "Private", and "Public" boxes.
  10. It's at the bottom of the window.
  11. This will save your settings and open your port(s).
    • If opening the ports required by your software or server doesn't resolve your problem, you may also need to set up port forwarding on your router.
  12. Advertisement
Section 2 of 7:

Open Ports on Windows (Command Prompt)

PDF download Download Article
  1. 1
    Open Command Prompt as an administrator. If you want to use the command prompt to open ports on Windows, you'll want an administrator CMD window. [4] To open one:
    • Press the Windows key and type cmd .
    • Right-click Command Prompt and select Run as Administrator .
    • Click Yes to continue.
  2. 2
    Open a port. To open ports in command prompt, you'll use the netsh advfirewall command. You will need to know the port number you are supposed to open and the protocol (TCP or UDP). In this example, we will open port 25565, a port commonly associated with Minecraft: [5]
    • netsh advfirewall firewall add rule name= "Open port 25565" dir=in action=allow protocol=TCP localport=8025565
    • "Open port 25565" is the name we gave to the firewall rule–you can call this anything you want.
    • You can learn about more port-opening options by running the command netsh advfirewall firewall add rule ?
    • Want to see which ports are open? Jump down to How to Check if Ports are Open .
  3. Advertisement
Section 3 of 7:

Open Ports on a Mac

PDF download Download Article
  1. 1
    Open your Mac's firewall settings. If you want to allow a specific app through your firewall, you can do so in your firewall settings . Unlike in Windows, you won't need to open specific port numbers on your Mac—the firewall manages ports on a per-application basis. Follow these steps to open your firewall settings: [6]
    • macOS Ventura or later: Click the Apple menu, select System Settings , click Network , and then click Firewall . [7]
    • macOS Monterey and earlier: Click the Apple menu, select System Preferences… , Click Security & Privacy , and then click the Firewall tab.
  2. 2
    Click Options… . This will be called "Firewall Options" on older versions of macOS. A list of firewall rules will appear.
    • If the options button is turned off, the firewall is disabled. Enable it now to continue. [8]
  3. 3
    Click + . You'll see this option below the list of firewall rules. [9]
  4. Simply click an application to select it.
    • If the app you are looking for doesn't appear on the list, it may already have access through the firewall. This is true for many system services, as well as some digitally signed apps. [10]
  5. 5
    Click Open . It's near the bottom of the window. Doing so will add the program to the list.
  6. 6
    Make sure "Allow incoming connections" is displayed next to the app's name. If you don't see this to the right of the application's name, click the dropdown menu to the right of the application’s name and select Allow incoming connections .
  7. 7
    Click OK to save your changes. The application is now allowed through the firewall.
    • If opening the ports required by your software or server doesn't resolve your problem, you may need to also set up port forwarding on your router.
  8. Advertisement
Section 4 of 7:

Open Ports on a Router

PDF download Download Article
  1. You'll need your router's IP address to access your router's configuration page.
    • Windows: Press the Windows key on your keyboard, type cmd , and click Command Prompt . At the prompt, type ipconfig and press Enter . The IP address of your router appears next to "Default gateway." [11]
    • Mac: Open the Launchpad, type terminal , and click Terminal . [12] Then, type or paste netstat -nr and press Return to find the IP next to "Default."
  2. Open your preferred web browser, then type or paste your router's IP address into the address bar. Press Enter or Return to bring up the login page.
  3. If you've already configured the router , enter the username and password you chose then. If not, consult your router's manual or online page for the stock username and/or password.
    • If you've forgotten your login information, you may have to reset the router .
  4. Since each router's page will differ slightly from others, look for the following options (or variations of them):
    • Port Forwarding
    • Applications
    • Gaming
    • Virtual Servers
    • Firewall
    • Protected Setup
    • You may also want to look for an Advanced Settings section.
  5. Each router will have a slightly different way of doing this, although the required information is the same for any router:
    • Name or Description - Enter the application's name.
    • Type or Service Type - This can be TCP, UDP, or both. If you aren't sure of which one to select, click Both or TCP/UDP .
    • Inbound or Start - Type in the port number here. If you are opening a range of ports, type in the lowest number in the range instead.
    • Private or End - Re-type in the port number here. If you are opening a range of ports, type in the highest number in the range instead.
    EXPERT TIP

    Luigi Oppido

    Computer & Tech Specialist
    Luigi Oppido is the Owner and Operator of Pleasure Point Computers in Santa Cruz, California. Luigi has over 25 years of experience in general computer repair, data recovery, virus removal, and upgrades. He is also the host of the Computer Man Show! broadcasted on KSQD covering central California for over two years.
    Luigi Oppido
    Computer & Tech Specialist

    Don't open ports unless you know what you are doing. If you are opening ports, you're opening more doorways into your network. Use unique ports that people aren't using, maybe in the thousands or so, because a lot of people use three-digit ports.

  6. This goes in the "Private IP" or "Device IP" field. You can find your private IP address on a PC or on a Mac .
  7. Click the Save or Apply button. If prompted, you'll also need to restart your router for the changes to take effect.
    • You may also have to check an "Enabled" or "On" box next to the forwarded port row.
  8. Advertisement
Section 5 of 7:

Open Ports on Linux

PDF download Download Article
  1. 1
    Make sure the port you want to open is not in use. You can do this using the netstat command at the command line. In this example, we'll check to see if port 3331 is open:
    • netstat -na | grep :3331
    • If you get a "Command not found" when using netstat, replace "netstat" with "ss" like this: ss -na | grep :3331
    • If the port is not currently in use, you will not get any sort of message because the port number was not found in the firewall rules. If the port is in use, you will see its associated rule.
  2. 2
    Open the port in UFW (Uncomplicated Firewall). If you are using Debian, Ubuntu, or another Debian-based distribution running UFW, you would use this command to open port 3331: [13]
    • sudo ufw allow 3331
  3. 3
    Open the port in firewalld. If you are using firewalld, the default firewall for Fedora, CentOS, Red Hat, and other RH-based distros, you would use this command to open port 3331: [14]
    • firewall-cmd --add-port=4000/tcp
  4. Advertisement
Section 6 of 7:

How to Check If Ports Are Open

PDF download Download Article
  1. To see if your ports are open to people outside of your network, try a web-based port checker. These port-checking websites are great for making sure certain ports, such as your Minecraft server or Soulseek port, are open. Just visit any of these sites and enter your IP address and the port you want to check.
    • [15]
    • [16]
    • [17]
  2. If you want to see a quick list of all open ports on your Windows PC, you can run a simple command at the command prompt. Here's how:
    • Press the Windows key on your keyboard and type cmd .
    • Right-click Command Prompt and choose Run as administrator .
    • Click Yes to proceed.
    • Type netstat -ab and press Enter .
    • All open TCP and UDP ports will appear, along with the name of the app using that port. [18]
  3. You can see a list of all open ports in your Mac's Terminal app. Here's how:
    • Open Terminal by clicking the Terminal icon on the Launchpad. [19]
    • Type lsof -i -P and press Return to see all open (listening) ports. It may take a moment for the list to populate.
  4. 4
    See all open ports on Linux. To see which ports are in use on your Linux system, open a Terminal and run the command sudo ss -tunl .
    • You can also use the command sudo lsof -nP -iTCP -sTCP:LISTEN to see a list of TCP listening ports.
  5. Advertisement
Section 7 of 7:

FAQ

PDF download Download Article
  1. 1
    What does open ports mean? An open port is a network entry point that can accept connections. For example, when you load a website that begins with "https://", the SSL port (port 443) is open, which allows you to access the website.
  2. 2
    Why do hackers scan for open ports? Hackers use port-scanning tools to scan for exploitable software/vulnerabilities in remote computers. For example, a hacker can enter an IP address, scan it for all open ports, and then use various tools to try exploiting the software running on those ports. [20]
  3. 3
    Why are ports 80 and 443 open? If these ports are open on your server, it's usually because there's a web server running (or installed and not yet running). Port 80 (and sometimes port 8080) is the standard unencrypted HTTP port, while 443 is the encrypted HTTPS port. [21] In most cases, port 80 forwards to port 443 so that people attempting to load the unsecured version of the website will be served the SSL version. [22]
  4. 4
    What happens when you open a port? You're allowing inbound connections through your firewall. Essentially, you're opening a door to computers outside of your network to connect to the software that runs on that port.
  5. Advertisement

Community Q&A

Search
Add New Question
  • Question
    Will this put my device or router in danger of hacking or viruses?
    Community Answer
    Yes, opening the wrong port may compromise your computer's security and render it vulnerable to viruses and other malicious activity, like hacking.
  • Question
    How can a hacker open a port?
    Community Answer
    By using ipconfig command at the command prompt or using Windows log key and type run and then cmd.
  • Question
    How do I tell if a port is open on my router?
    Community Answer
    Go to command prompt and enable telnet services, syntax, telnet (ipadress) (port number).
See more answers
Ask a Question
      Advertisement

      Video

      Tips

      • Most applications use TCP ports. Time-sensitive programs, like multiplayer video games and live streaming apps, may use both UDP and TCP ports.
      Submit a Tip
      All tip submissions are carefully reviewed before being published
      Name
      Please provide your name and last initial
      Thanks for submitting a tip for review!
      Advertisement

      Warnings

      • Be careful when opening ports. Opening the wrong port may compromise your computer's security and make it vulnerable to viruses and other malicious activity like hacking .
      Advertisement

      About This Article

      Article Summary X

      1. Sign in to your router’s admin site.
      2. Go to the Firewall page.
      3. Locate the Port Forwarding section.
      4. Enter or select the port.
      5. Enter your computer’s private IP address.
      6. Click Save or Apply .
      7. Restart the router.

      Did this summary help you?
      Thanks to all authors for creating a page that has been read 1,288,071 times.

      Reader Success Stories

      • Ogymus Shepherd

        Feb 11, 2017

        "This article helped me, but there was one tip that helped me a lot. It was number 3, because I didn't know ..." more
      Share your story

      Is this article up to date?

      Advertisement