Restrict deployment access by IP address

With Trusted IPs enabled at the level of your project, only visitors from an allowed IP address can access your deployment. The deployment URL will return 404 No Deployment Found for all other requests. Trusted IPs is configured by specifying a list of IPv4 addresses and IPv4 CIDR ranges.

Trusted IPs works well if you access Vercel deployments through a specific IP address. For example, you can limit preview deployment access to your VPN. You can also enable Trusted IPs in production to restrict incoming access to only requests through your external proxy.

The tables below outline key considerations and security implications when using Trusted IPs for your deployments on Vercel.

You can manage Trusted IPs through the dashboard, API, or Terraform.

1. Go to project deployment protection settings

   From your Vercel dashboard:

   1. Select the project that you wish to enable Trusted IPs for
   2. Go to Deployment Protection in the sidebar

2. Manage Vercel Authentication

   Ensure Vercel Authentication is enabled. See Managing Vercel Authentication.

3. Manage Trusted IPs

   From the Trusted IPs section:

   1. Use the toggle to enable the feature
   2. Select the deployment environment you want to protect
   3. Enter your list of IPv4 addresses and IPv4 CIDR ranges with an optional note describing the address
   4. Finally, select Save

   All your existing and future deployments will be protected with Trusted IPs for that project. Visitors to your project deployments from IP addresses not included in your list will see a No Deployment Found error page.

You can manage Trusted IPs using the Vercel API endpoint to update an existing project with the following body:

To enable or update Trusted IPs, send the trustedIps object:

{
  "trustedIps": {
    "deploymentType": "all",
    "addresses": [{ "value": "203.0.113.0/24", "note": "Office network" }],
    "protectionMode": "additional"
  }
}

To disable Trusted IPs, set trustedIps to null:

{
  "trustedIps": null
}

You can configure Trusted IPs using trusted_ips in the vercel_project data source in the Vercel Terraform Provider.