> ## Documentation Index
> Fetch the complete documentation index at: https://docs.base44.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding an IP allowlist for your workspace

> Control who can access your workspace by allowing sign-in only from approved IP addresses.

IP allowlist lets you restrict access to your enterprise workspace and its apps so that only people on specific networks can sign in. This is useful if your team connects from a known office network or VPN and you want to block access from other locations. Requests from IP addresses that are not in the allowlist receive a 403 Forbidden response.

When IP allowlist is enabled, all apps in the workspace are protected by the allowlist.

<Warning>
  **Important:**

  * IP allowlist is only available for enterprise workspaces.
  * Only workspace owners and admins can view or change IP allowlist settings.
  * Blocked access covers:
    * Published apps (people using the app)
    * Apps in builder mode (development and editing)
  * Supported IP formats:
    * Single IP: `192.168.1.5`
    * CIDR notation: `192.168.1.0/24`
    * IP range: `192.168.1.5-192.168.1.50`
    * IPv6 address: `2001:db8::1`
    * IPv6 CIDR: `2001:db8::/32`
  * Authorized Base44 support staff may bypass the IP allowlist as part of support operations.
</Warning>

***

## Setting up an IP allowlist

You can enable and configure your IP allowlist from **Auth and security** in your workspace settings.

**To set up an IP allowlist:**

1. Click your workspace name at the top left of your account.
2. Click **Settings**.
3. Click **Auth and security**.
4. Scroll to the **IP Allowlist** section.
5. Enable the **IP Allowlist** toggle.
6. In the list, enter the IP addresses or ranges you want to allow.
7. Click **Add**.

<Frame caption="Adding IP allowlist in your workspace">
  <img src="https://mintcdn.com/base44/lKEuUqrQ4MPL45Vu/images/ipallowlist1.png?fit=max&auto=format&n=lKEuUqrQ4MPL45Vu&q=85&s=1805690ad01f3f9cc739acc090eccc76" alt="Adding IP allowlist in your workspace" width="1696" height="642" data-path="images/ipallowlist1.png" />
</Frame>

***

## FAQs

Click a question below to learn more about using IP allowlist for your workspace.

<AccordionGroup>
  <Accordion title="What if my internet provider changes my IP address?">
    If your public IP changes, you need to update the allowlist with the new IP. If your IP changes often, it is usually better to route access through a stable VPN endpoint or office network instead of adding individual home IPs.
  </Accordion>

  <Accordion title="Does IP allowlist replace authentication or SSO?">
    No. IP allowlist adds a network-level restriction on top of your existing sign-in and SSO setup. People still need valid credentials to sign in, even if they connect from an allowed IP.
  </Accordion>

  <Accordion title="Does IP allowlist affect outgoing connections from my apps?">
    No. IP allowlist controls who can access your workspace and its apps. It does not block or filter outbound connections that your apps make to external services or APIs.
  </Accordion>
</AccordionGroup>