Setting Up IP allowlist

Introduction

IP allowlist (also known as IP whitelist) is a security feature that restricts access to your INTROSERV account to specific IP addresses only. When enabled, you can only log in to your account from the IP addresses you've explicitly authorized, adding an extra layer of protection against unauthorized access.

Who Should Use This Feature?

• Users who always access their account from fixed locations (office, home with static IP)
• Organizations requiring strict access control policies
• Users concerned about account security and unauthorized access
• Anyone looking to complement two-factor authentication with network-level security

Prerequisites

Before setting up IP restrictions, ensure you have prepared the following:

1. Complete Your Profile Information

The system requires all mandatory fields to be filled, particularly:

• City
• Address

If these fields are empty, you will see a warning message at the top of the page and won't be able to proceed with payments or certain security settings.

2. Know Your IP Address.

You must know your current public IP address or the range of addresses you want to allow. You can find your current IP by:

• Searching "what is my IP" in any search engine
• Visiting websites like whatismyipaddress.com
• Asking your network administrator (for office networks)

3. Have Alternative Access

Consider having a backup access method in case you accidentally lock yourself out.

Step-by-Step Configuration

Step 1: Access Security Settings

1. Log in to your INTROSERV account
2. Click on SETTINGS in the left sidebar menu
3. Navigate to the Security tab (next to "General settings" and "History")

Step 2: Locate IP Restriction Field

On the Security page, you will see several security-related options:

• Two-factor authentication (with "Turn On" button)
• Code word (additional password field)
• Restriction by IP - THIS IS WHERE YOU'LL ENTER YOUR IPS
• Show last IP (checkbox)
• Change password section

Step 3: Enter Allowed IP Addresses

Click in the "Restriction by IP" text box and enter the IP addresses you want to authorize. You can use the following formats:

Type	Example	Use Case
Single IP	203.0.113.1	One specific location
Multiple IPs	203.0.113.1<br>198.51.100.25	Office and Home
CIDR Range	203.0.113.0/24	Entire subnet
Mixed	203.0.113.1<br>198.51.100.0/28	Specific and range

Info: Before proceeding to Step 4, verify that your current IP address is included in the list you are about to save.

Step 4: Save Your Settings

1. Double-check that your current IP address is included in the allowlist
2. Scroll down to the bottom of the page
3. Click the green Save button
4. You will receive a confirmation message

Important Warnings

Don't lock yourself out. CRITICAL: Before saving your settings, verify that:

• Your current IP address IS included in the allowlist
• If you use dynamic IP (changes periodically), consider using an IP range or NOT enabling this feature
• You have access to the physical location with the allowed IP

What Happens After Enabling

Once IP restriction is active:

• Login attempts from non-whitelisted IPs will be blocked
• You will only be able to access your account from authorized IP addresses
• The restriction applies to all account features
• Your login history will show which IPs have been used

Managing IP Restrictions

Adding New IP Addresses

If you need to access your account from a new location:

1. Log in from an already authorized IP (from a known location)
2. Go to Settings > Security
3. Add the new IP address to the existing list
4. Click Save

Removing Restrictions

To disable IP filtering entirely:

1. Navigate to Settings > Security
2. Clear all entries from the "Restriction by IP" field
3. Click Save

Updating Your Allowlist

If your IP address changes:

1. You must log in from a previously authorized IP
2. Update the list with your new IP address
3. Remove old/unused IPs for security
4. Click Save

Troubleshooting

I'm Locked Out

If you cannot access your account because of IP restrictions, you have several options:

Option 1: Try from an Authorized Location

Access your account from a location with an IP in your allowlist. This is the fastest solution if you remember which location had the original IP.

Option 2: Contact Support

Reach out to INTROSERV support with your account verification details. Support can help you regain access by temporarily removing IP restrictions. Provide: account email, recovery phone number, and other verification information

Option 3: Use Alternative Network

• Connect through a VPN that uses an authorized IP
• Ask your office/organization IT department for help

My IP Keeps Changing

If you have a dynamic IP address (common with home internet):

Option A: Use a Broader IP Range

• Ask your ISP for their IP range
• Add the entire range to your allowlist using CIDR notation
• Example: 203.0.113.0/24 covers 256 addresses

Info: Adding an entire subnet means all users on that network will have access to your account.

Option B: Don't Use IP Restrictions

Consider not enabling this feature if your IP is frequently unstable. Use two-factor authentication instead (more reliable for home users).

Option C: Get a Static IP

Contact your ISP about upgrading to a static IP address. Usually costs a small monthly fee but provides permanent stability.

Option D: Combine Approaches

• Use IP restrictions only for your office/work location (static IP)
• Use two-factor authentication for home access (dynamic IP)

Best Practices

Combine with Two-Factor Authentication

Use IP restrictions together with 2FA for maximum protection. This provides defense in depth with two separate security layers.

Regular Reviews

Periodically review and update your IP allowlist:

• Remove old or unused addresses
• Check your History tab monthly for suspicious activity

Document Your IPs

Keep a record of authorized IPs and their purposes:

• 203.0.113.5 - Office
• 198.51.100.0/28 - Office subnet
• 192.0.2.50 - Home location

Minimum Access Principle

• Only add IPs that you regularly use
• Do not whitelist entire office subnets unless necessary
• Remove IPs immediately when you stop using them

Monitor Login History

Check the History tab regularly for unauthorized access attempts. Look for logins from unfamiliar IPs.

For Organizations

• Coordinate with your IT department to get office IP ranges
• Document who has access and from which IPs
• Establish a process for updating the allowlist when employees work remotely
• Consider using VPN with static IP for remote workers

Additional Security Features

INTROSERV offers complementary security features in the Security tab:

• Two-factor authentication - Adds SMS or app-based verification
• Code word - Additional password for sensitive operations
• Show last IP - Display your last login IP address
• Restriction by IP - Limit access to specific IP addresses

Tip: Enable multiple security features for comprehensive account protection. Most users benefit from combining IP restriction with 2FA.

Support

If you need assistance with IP allowlist configuration:

1. Contact INTROSERV support through your account
2. Provide your account details and describe your network setup
3. Support can help verify your configuration and resolve access issues

Quick Reference

Checklist Before Saving

• Your current IP is in the allowlist
• You have a backup access method
• All mandatory profile fields are filled (City, Address)
• You understand the lockout risk
• You have considered using dynamic IP solutions (if applicable)

In Case of Lockout

1. Try authorized location - fastest
2. Contact support - most reliable

Info: IP allowlist is a powerful security tool, but it requires careful configuration. Always ensure you have a way to access your account before enabling restrictions. When in doubt, contact support before saving your settings.