IP whitelisting

IP whitelisting is a security feature that allows only specific IP addresses to access a particular system or network. This feature provides an added layer of security by preventing unauthorized access from unknown IP addresses.

IP whitelisting is commonly used by organizations to protect their networks from cyber attacks, data breaches, and other security threats. By implementing an IP whitelist, organizations can ensure that only trusted devices and users can access their systems, databases, and applications.

IP whitelisting can be useful in a variety of scenarios. For example, organizations may want to whitelist the IP addresses of their employees who work remotely or from different locations. This ensures that only authorized employees can access company resources from outside the office.

Another scenario where IP whitelisting is commonly used is in online banking and financial transactions. Banks often whitelist the IP addresses of their customers to prevent unauthorized access and fraudulent activities.

With Paystack’s IP whitelisting feature, you can prevent unauthorized usage of your secret keys. This means we will block secret key requests that come from a non-whitelisted IP address.

We will check the IP address the request originated from for every secret key request and compare it with the list of whitelisted IP addresses. If the request’s IP address is within the list of whitelisted IP addresses, we will allow the request to go through. If the request’s IP address is not within the list of whitelisted IP addresses, we will block the request.

Whitelisted IPs are tied to secret keys. You can set different whitelisted IPs for your live and test secret keys. We will send an email to the main owner of the integration when a user updates the whitelisted IPs for your live secret keys.

You can whitelist your IPs from your Paystack Dashboard under the API Keys and Webhook Settings tab here. Simply click on the '+Add IP address' button, input your desired IP address and click on 'Save changes'.

Will IP Whitelisting affect where I can log into my Dashboard from?

No. It will only block requests that use your secret key as the authentication mechanism.

Who can whitelist IPs on my Paystack Account?

Admin users or users with permission to manage API Keys and Webhooks.

How many IPs can I whitelist?

Up to 10 for each domain (live and test).

What types of IPs are accepted?

We will only accept valid public IPv4 addresses.

We will not accept:

• IPv6 addresses,

• Ranges, and

• Private IP addresses.