Security is of utmost importance for any monday.com account. For this reason, admins of an Enterprise plan now have the ability to pre-define specific IP addresses which will be able to join the account. This can be extremely useful if you are looking to restrict account access only to users joining from a specific location (i.e. from the office), those using a certain VPN, or more!

 

How the IP restriction works

With the IP restriction feature, you can define a set of allowed IP addresses on your account. Any user attempting to log in with an IP address that does not match an address on the allowed list will receive the below error message and they will not have the ability to proceed.

 

Locating the feature

To access the IP restriction feature, click on your profile picture at the top right corner of your screen and select "Administration" from the resulting menu.

 

From the administration section of the account, click into the "Security" section and select the dropdown arrow button to the right of "IP address restriction" as so:

 

How to set it up

To ensure that no one gets blocked out of the account before all of the IP restrictions are set, we recommend to first add the relevant IP addresses and afterwards to activate the allowed list.

To begin adding IP addresses to the allowed list, first provide a descriptive name for the IP address (i.e. "Office" or "Home network") and add in the respective IP address number. To set a range of IP addresses, you can use CIDR notation (i.e. 127.0.0.1/24).

One done, press on the "Add" button to the right:

 

 

After you've added a list of IP addresses that you wish to have approved on the account, select the checkbox above the list and then press "Activate" as so:

 

It is important to note that in order to complete the activation process, you must have your own IP address listed in the allowed list. Otherwise, you will receive the following error message and your list of allowed IP addresses will not be activated. 

 

Once your IP address allowed list is activated, you will be all set! Any user who then tries to access the account will only be able to do so if they have the IP address on the allowed list. 🙌

 

Important to know

When using the IP restriction feature, it is important to keep in mind the following:

1. Shared views are not restricted to the IP's added to the allowed list. Therefore, everyone that has a link to a shared view will be able to view them, regardless of their IP address.
2. Similar to shared views, links to monday Forms are also not restricted to the IP's added to the allowed list. If someone has a link to a monday Form, they will be able to use that given form.
3. The mobile app is bounded by the IP restrictions, too. If a user tries to log in via the mobile app outside of the permitted IP, they will not be able to log in.
4. Apps hosted with monday code will not work if the IP restriction is on.

 

 

 

If you have any questions, please reach out to our team right here. We’re available 24/7 and happy to help.