---
schema_version: "1"
id: d802f6d413edff1ae6f5d1411e0b63b2cd08ee8c813a5583d9ac832fd6482fcb
title: Login IP Allowlist
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/mktg/264-0-0/mc_overview_ip_allowlist.md
canonical_url: https://help.salesforce.com/s/articleView?id=mktg.mc_overview_ip_allowlist.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: efb4f037e4b6799d8b1107392c326cadd5a7cfc0e0b4a97fc3eb96d4f356d5ec
description: Prevent users from unauthorized IP addresses from accessing your Marketing Cloud Engagement accounts.
products:
  - Marketing
  - Marketing Cloud Engagement
release: "264"
---
# Login IP Allowlist

Prevent users from unauthorized IP addresses from accessing your Marketing Cloud Engagement accounts.

When you [enable the Login IP Allowlist](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_enable_allowlisting.htm&release=264.0.0&type=5 "Configure the behavior of the login IP allowlist in your Marketing Cloud Engagement account."), you specify the IP address ranges that belong to your network. Marketing Cloud Engagement also [recommends IP ranges based on previous logins](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_allowlist_recommendations_add.htm&release=264.0.0&type=5 "Review recommended IP address ranges and quickly add them to your login IP allowlist. Marketing Cloud Engagement tracks the IP addresses of users who log in to your org, and then suggests trusted IP ranges for your allowlist. Instead of entering IP ranges by hand, you review the suggested ranges and add the ones you trust to your allowlist."), which you can quickly add to your allowlist. If someone attempts to log in from an IP address that isn’t on the allowlist, Marketing Cloud Engagement logs the access attempt and denies the login. The login IP allowlist is turned off by default.

When the login IP allowlist is turned on, it applies to logins on the Marketing Cloud Engagement web interface and through the API. You can [configure separate IP ranges](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_allowlist_ip.htm&release=264.0.0&type=5 "Add IP addresses and ranges to the login IP allowlist for Marketing Cloud Engagement.") for UI and API access, and you can define those ranges at the business unit or Enterprise level. For ranges defined at the Enterprise level, each business unit inherits the parent settings.

The Access Log contains a list of IP addresses and login names that logged into or attempted to log into your network.

- **[Enable and Configure the Login IP Allowlist](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_enable_allowlisting.htm&release=264.0.0&type=5)**  
    Configure the behavior of the login IP allowlist in your Marketing Cloud Engagement account.
- **[Add IP Addresses to the Login IP Allowlist](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_allowlist_ip.htm&release=264.0.0&type=5)**  
    Add IP addresses and ranges to the login IP allowlist for Marketing Cloud Engagement.
- **[Add Recommended IP Ranges to the Login Allowlist](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_allowlist_recommendations_add.htm&release=264.0.0&type=5)**  
    Review recommended IP address ranges and quickly add them to your login IP allowlist. Marketing Cloud Engagement tracks the IP addresses of users who log in to your org, and then suggests trusted IP ranges for your allowlist. Instead of entering IP ranges by hand, you review the suggested ranges and add the ones you trust to your allowlist.
- **[Using the Login IP Allowlist with Broad or Dynamic IP Ranges](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_allowlist_large_ranges.htm&release=264.0.0&type=5)**  
    For the login IP allowlist to be effective, traffic that accesses your Marketing Cloud Engagement account must come from a stable IP range. If your organization uses the public cloud, dynamic infrastructure, or distributed networks, or if you have many remote employees, your users can access Marketing Cloud Engagement from a diverse range of IP addresses. In these situations, establish a stable egress path for your users before you turn on the login IP allowlist in blocking mode.
- **[Edit an IP Range](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_edit_iprange.htm&release=264.0.0&type=5)**  
    Change an IP address or range for the IP allowlist.
- **[Define IP Allowlist Source for Enterprise 2.0 Accounts](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_define_allowlist.htm&release=264.0.0&type=5)**  
    Choose how the IP allowlist applies to business units in Enterprise 2.0 accounts. You can choose to let each business unit specify the IP ranges for the allowlist separately, or you can configure all business units to inherit the settings from the parent account.
- **[View the Access Log](https://help.salesforce.com/s/articleView?id=mktg.mc_overview_view_ipallowlist.htm&release=264.0.0&type=5)**  
    See a list of attempts to log in to your Marketing Cloud Engagement account from IP ranges that are outside the ones specified by your IP allowlist.