> For the complete documentation index, see [llms.txt](https://documentation.proto.cx/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://documentation.proto.cx/docs/settings/general/ip-allowlist.md).

# IP allowlist

{% hint style="info" %}
Restricts workspace sign-in to specific IP ranges. Available on the Total plan and above.
{% endhint %}

Go to **Settings → Workspace → IP Allowlist**.

***

## Settings

{% hint style="warning" %}
Enable **Exempt admins** before saving. If your current IP is not in an allowed range, you will be locked out immediately upon saving.
{% endhint %}

| Setting                 | Description                                                                                                                                           |
| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Enable IP allowlist** | Toggles the allowlist on or off. When on, only configured IP ranges can sign in.                                                                      |
| **Exempt admins**       | Admin role users can sign in from any IP address regardless of the allowlist.                                                                         |
| **Allowed IP ranges**   | Each entry defines a start and end IP address. All addresses between are permitted. To allowlist a single IP, set it as both the start and end value. |
| **Add range**           | Adds a new IP range row.                                                                                                                              |

Select **Save** to apply changes.

***

## Example

To allow IPs 100.0.0.0 through 100.0.0.9 — set Start to `100.0.0.0` and End to `100.0.0.9`.

To allowlist a single address — set both Start and End to the same IP, e.g. `203.0.113.5`.