Allow sign-ins only from certain addresses
A company admin can limit sign-ins for everyone in the company to chosen network addresses, such as your office or VPN. Take care not to lock people out.
Updated · 2 min read
On this page
Add addressesTurn it onWhat it does and does not doRemove an addressIf you are locked outYou can make it so people in your company can only sign in from network addresses you choose, such as your office or your VPN. A network address, or IP address, is the number that identifies the network you are on. Only company admins can change this.
Add addresses
- Click Settings in the sidebar, then Organization.
- Under Company IP allowlist, click Add IP.
- Type a single address or a range under IP or range, or click Use my current IP. A range looks like
203.0.113.0/24. - Add a Label if you want to remember what it is, such as your head office.
- Click Add IP.
Turn it on
Turn on the Restrict sign-ins switch. We add your current address first, so you do not lock yourself out.
This applies to every account in your company, including yours and other admins. Anyone signing in from another address gets a message that sign-in is blocked. Add every office, VPN and home address people need before you turn it on.
What it does and does not do
- It checks people when they sign in, with a password or with Google. Anyone already signed in stays signed in.
- It does not affect Remote Desktop. That has its own Allowed IP addresses list on each computer.
Remove an address
Click Remove on its row, then Remove IP. If you remove the last address, the restriction turns off and any address can sign in. If you remove the address you are on, you are locked out the next time you sign in from there.
If you are locked out
Ask another company admin who is on an allowed address to add yours. If nobody can sign in, contact our team.
Was this helpful?
Sorry about that. Our team can help.