mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
25 lines
1.1 KiB
Plaintext
25 lines
1.1 KiB
Plaintext
---
|
|
title: "IP Allowlisting"
|
|
description: "Restrict access to your secrets in Infisical using trusted IPs"
|
|
---
|
|
|
|
Projects in Infisical can be configured to restrict client access to specific IP addresses or CIDR ranges. This applies to any client using service tokens and
|
|
can be useful, for example, for limiting access to traffic coming from corporate networks.
|
|
|
|
By default, each project is initialized with the `0.0.0.0/0` entry, representing all possible IPv4 addresses.
|
|
For enhanced security, we strongly recommend replacing the default entry with your client IPs to tighten access to your secrets.
|
|
|
|
<Note>
|
|
You must be a project `admin` to manage your project's IP whitelist.
|
|
</Note>
|
|
|
|
|
|
|
|
## Creating a trusted IP entry
|
|
|
|
To create a trusted IP entry, head over to the **IP Whitelist** tab in your project. When creating an entry,
|
|
you can specify either a specific IP address like `192.0.2.1` or a CIDR range like `2001:db8::/32`; both IPv4 and IPv6
|
|
formats are accepted.
|
|
|
|
|