How to whitelist IP addresses

You can limit access to your legal entity Web UI and API by whitelisting trusted IP addresses. We recommend that you use this option to protect your finances.

Only users with the Owner role can whitelist IP addresses.

Restrict access to Web UI

This setting will apply to all users under this particular legal entity, including the Owner. Enter IP addresses carefully, otherwise you risk losing access to the system.

To let your users access the system only from the trusted IP addresses:

1

Click your user icon in the upper right corner of the page and select Access list.

2

Switch to the IP whitelist tab.

3

In the Specify IP addresses filed, click the pencil icon and add trusted IP addresses. Press Enter after each IP.

Both IPv4 and IPv6 formats are supported.

You can list individual IP addresses or define a subnet mask (such as the one used to assign your company IPs).

Only static IP addresses can be included in the whitelist, dynamic IPs are not supported.

4

Click the check mark icon to apply changes.

5

In the confirmation popup, enter your Authorization 2FA for operations code and click Confirm.

Now access to the system Web UI is allowed only from the specified IPs. All users currently logged in from untrusted IP addresses will be logged out.

Restrict access to API

To let your users access the system API only from the trusted IP addresses:

1

Click your user icon in the upper right corner of the page and select Access list.

2

Switch to the API tab.

3

In the Whitelist IP access field, click the pencil icon and add trusted IP addresses. Press Enter after each IP.

Both IPv4 and IPv6 formats are supported.

You can list individual IP addresses or define a subnet mask (such as the one used to assign your company IPs).

Only static IP addresses can be included in the whitelist, dynamic IPs are not supported.

4

Click the check mark icon to apply changes.

5

In the confirmation popup, enter your Authorization 2FA for operations code and click Confirm.

Now access to the system API is allowed only from the specified IPs.