To help mitigate the IP address scarcity of IPv4, Salesforce is working behind the scenes to support IPv6. If you use IP allowlists to restrict network traffic or access to Salesforce, prepare for this change. Use a preferred alternative such as domain allowlists, or update your allowlists to include IPv6 addresses.
Where: This change applies to Lightning Experience and Salesforce Classic in all editions.
When: Today, IPv6 is supported only for the Salesforce content delivery network (CDN) for Experience Cloud sites. With full IPv6 support, users and integrations can connect to Salesforce via an IPv6 address. We’re announcing this upcoming change to give you time to update your allowlists.
Salesforce plans to roll out IPv6 support in stages, starting with Government Cloud orgs in 2026. Government Cloud customers, watch for communications from Salesforce about this change.
There’s no specific target date for full IPv6 support for other orgs, but we expect support to be available no earlier than 2027. Check future release notes for the specific timing for each stage. Salesforce plans to provide the IPv6 addresses at least 2 months before IPv6 is fully supported in the affected orgs.
Why: IP address restrictions can exist both in and outside Salesforce.
In Salesforce, an IP address allowlist range can include either IPv4 or IPv6 addresses but not both types. When Salesforce supports IPv6 for your org, IPv4 allowlists remain active, and users can log in only via an IPv6 address that their profile allows.
Outside Salesforce, your company can restrict network traffic. For example, an allowlist defines the IP addresses for user access or network entry. If those allowlists don’t include Salesforce IPv6 addresses when Salesforce supports IPv6, end-user disruptions and integration failures can occur.
How: If you use IP allowlists, consider a preferred alternative, such as domain allowlists or Service Name Indication (SNI).
If you continue to restrict access to Salesforce by IP address, update your Salesforce allowlists to include IPv6 addresses. For each profile with a login IP range, add one or more login IP ranges with your users’ IPv6 addresses. There’s no correlation between an IPv6 address and an IPv4 address, so work with your network team to determine your users’ IPv6 addresses.
If you continue to restrict network traffic by IP address, update those allowlists to include Salesforce IPv6 addresses when those addresses are available.