---
schema_version: "1"
id: 696f1c6a12b0c4c831fc726de0ba40e68e4f80bc34e64241eb44bdfd2cfb6549
title: Enable and Configure the Login IP Allowlist
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_enable_allowlisting.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_enable_allowlisting.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1001c0791686ac4164a51b9485801e2b210450b3e19699306071754a27b2103e
description: Configure the behavior of the login IP allowlist in your Marketing Cloud Engagement account.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Enable and Configure the Login IP Allowlist

Configure the behavior of the login IP allowlist in your Marketing Cloud Engagement account.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col style="width:100%"></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: All Marketing Cloud Engagement editions</td></tr></tbody></table>

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:left;vertical-align:top;" id="d41075e55">User Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d41075e55 ">To change login IP allowlist settings:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d41075e55 ">Marketing Cloud Administrator</td>

          </tr>
        </tbody>
      </table>

Before you complete these steps, populate the login IP allowlist with the IP ranges of your users. You can [add addresses and ranges manually](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_allowlist_ip.htm&release=264.0.0&type=5 "Add IP addresses and ranges to the login IP allowlist for Marketing Cloud Engagement."), or [add suggested IP ranges based on the past 6 months of logins to your account](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_allowlist_recommendations_add.htm&release=264.0.0&type=5 "Review recommended IP address ranges and quickly add them to your login IP allowlist. Marketing Cloud Engagement tracks the IP addresses of users who log in to your org, and then suggests trusted IP ranges for your allowlist. Instead of entering IP ranges by hand, you review the suggested ranges and add the ones you trust to your allowlist.").

1. In Marketing Cloud Engagement Setup, in the Quick Find box, enter security, and then click **Security Settings**.
2. Click **Edit**.
3. For **Restrict Logins by IP Address (IP Allowlisting)**, select a setting. Choose from these options:
    
    - **IP Allowlisting Disabled**: Users can log in from any IP address. The access log doesn’t track login attempts based on IP address.
    - **Log Allowlist Violations**: Sometimes called monitoring mode. Users can log in from any IP address. The access log tracks login attempts from IP addresses that aren’t on the allowlist.
    - **Log Violations and Deny Access**: Sometimes called blocking mode. Users can log in only from IP addresses on the allowlist. The access log tracks login attempts from IP addresses that aren’t on the allowlist.
    
    ![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-mktg-mc_marketing_cloud_overview-264-0-0-production-enus/2555afdb-8049-4e3c-8043-0e04803e5f16/images/icon_important.png)
    
    Important
    
    If you select **Log Violations and Deny Access**, Marketing Cloud Engagement enforces the login IP allowlist for each user the next time they login. Users who are logged in when you make this change remain logged in. Marketing Cloud Engagement enforces the allowlist the next time they log in.
    
    Before you log out, make sure that your IP address, or a range that includes your IP address, is on the allowlist. If you log out before you add your IP address to the allowlist, you can’t log back in.
4. Save your changes.