IP security & access to Maglr
An IP filter limits the publications on a domain name to visitors from specific IP addresses. Only people whose connection comes from an allowed address, such as the office network or a corporate VPN, can open them. This makes the IP filter (also called IP security) suitable for publications meant for internal communications.
The IP filter applies to all projects shown on one domain name. You can't set it for a single project. To secure a single project, read Securing your project(s). The IP filter also doesn't limit who can log in to the Maglr dashboard.
Securing a domain name with an IP filter
To limit a domain name to visitors from specific IP addresses, an Admin sets up an IP filter in the domain name's settings:
- Go to
Settings›Domain names. - Click the pencil icon next to the domain name you want to secure. To set up a new domain name instead, click
Add domain name. - In the "Secure domain name" section, switch on
Activate login security. - In the login type list that appears below the switch, select
Secure with IP filter. - In
Enter your IP address, enter the allowed IP addresses, separated by commas with no spaces. For example:12.12.12.12,34.34.34.34. - Click
Save changes. When you add a new domain name, the button isSave domain name.
From then on, only visitors from the allowed IP addresses can open the projects on that domain name. In the Domain names overview, the Security column shows "Secure with IP filter" for that domain name.
IP address input rules
The Enter your IP address field accepts only exact IPv4 addresses:
- Separate multiple addresses with commas, without spaces.
- Ranges, wildcards and CIDR notation (such as
/24) are not accepted. - If an entry doesn't meet these rules, the field shows "Invalid ip address" and you can't save.
What visitors outside the allowed network see
A visitor whose IP address is not on the IP filter list can't open any project on the secured domain name. They see an "Access denied" page instead.
The check uses the visitor's public IP address, so the device doesn't matter, only the network it connects through. A phone on the office Wi-Fi, or on a corporate VPN that sends its traffic through an allowed IP address, gets in. The same phone on mobile data does not.
Combining the IP filter with other security
The IP filter is one of the login types for a domain name. A domain name has one login type at a time, so you can't combine the IP filter with a manual password, an auto-login URL or an email login on the same domain name. If your account has Single Sign-On, its switch (Activate Single Sign-On) is separate and can be on at the same time as the IP filter.
IP filter availability
The IP filter is available on the Enterprise plan. Maglr enables it for your account. Until then, Secure with IP filter appears in the login type list (shown after you switch on Activate login security) but is greyed out and can't be selected.
Only users with the Admin role can set up an IP filter, because only Admins see Domain names under Settings.
Frequently asked questions
Can I add an IP range instead of single addresses?
No. The IP filter only accepts exact IPv4 addresses, separated by commas without spaces. Ranges, wildcards and CIDR notation (such as /24) are not accepted. Add each allowed address separately.
Can I combine the IP filter with a password?
No. The IP filter and a manual password are both login types, and a domain name has one login type at a time. The same applies to an auto-login URL and an email login. If your account has Single Sign-On, it is a separate setting and can be on together with the IP filter.
Can I secure a single project with an IP filter?
No. The IP filter applies to all projects shown on a domain name. To secure a single project, read Securing your project(s).
Why can't I select Secure with IP filter?
The IP filter isn't enabled for your account yet. It is available on the Enterprise plan, and Maglr enables it for you. Contact support@maglr.com to have it enabled.
Does the IP filter work on mobile phones?
Yes, but only when the phone connects through an allowed network. A phone on the office Wi-Fi, or on a corporate VPN that sends its traffic through an allowed IP address, can open the publications. A phone on mobile data, or anywhere else outside the allowed network, sees an "Access denied" page.
Updated on: 28/10/2026