Skip to content

Trusted IPs are available on Enterprise plans

With Trusted IPs enabled, only visitors from an allowed IP address can access your deployment. The deployment URL will return 404 No Deployment Found for all other requests. Trusted IPs is configured by specifying a list of IPv4 addresses and IPv4 CIDR ranges.

Trusted IPs is suitable for customers who access Vercel deployments through a specific IP address. For example, limiting preview deployment access to your VPN. Trusted IPs can also be enabled in production, for example, to restrict incoming access to only requests through your external proxy.

Enabling Trusted IPs.
Enabling Trusted IPs.

The table below outlines key considerations and security implications when using Trusted IPs for your deployments on Vercel.

General Considerations
Environment Configuration
Can be enabled for different environments. See Understanding Deployment Protection by environment
Operates as a required layer on top of Vercel Authentication and Password Protection. For optional layering, see Standalone Trusted IPs
Bypass Methods
IP Address Support
Supports IPv4 addresses and IPv4 CIDR ranges
Preview Environment Requirements
Can only be enabled in preview when Vercel Authentication is also enabled. For independent use, see Standalone Trusted IPs
External Proxy Configuration
Requires rulesets configuration to avoid blocking proxy IPs. Contact our sales team for more information
Security Considerations
Firewall Precedence
Vercel Firewall takes precedence over Trusted IPs
IP Blocking
IPs listed in IP Blocking will be blocked even if listed in Trusted IPs
DDoS Mitigation
Trusted IPs do not bypass DDoS Mitigation unless configured
Deployment Impact
Changing the Trusted IPs list affects all deployments
Disabling Trusted IPs
Disabling makes all existing deployments accessible from any IP

Standalone Trusted IPs is an optional add-on to your Enterprise plan, contact our sales Team to learn more. Standalone Trusted IPs allows for the following:

From your Vercel dashboard:

  1. Select the project that you wish to enable Trusted IPs for
  2. Go to Settings then Deployment Protection

Ensure Vercel Authentication is enabled. See Managing Vercel Authentication.

From the Trusted IPs section:

  1. Use the toggle to enable the feature
  2. Select the deployment environment you want to protect
  3. Enter your list of IPv4 addresses and IPv4 CIDR ranges with an optional note describing the address
  4. Finally, select Save

All your existing and future deployments will be protected with Trusted IPs for that project. Visitors to your project deployments from IP addresses not included in your list will see a No Deployment Found error page.

Last updated on November 28, 2023