The IP firewall restricts access to your Tekst project so that only users connecting from approved IP addresses can log in. When enabled, any request from an IP address that is not on the allow list is blocked. Use this feature to limit access to your office networks, VPNs, or other trusted locations.
Prerequisites
- A Tekst account with an Admin or Contributor role. Users with the Reader or Sales role cannot manage the IP firewall.
Enable the IP firewall
Step 1: Open the IP firewall settings
Go to Settings > Security. In the IP Firewall card, click Edit to open the IP allow list settings dialog.
Step 2: Add your IP addresses
Before enabling the firewall, add every IP address or range that should be allowed to access your project. In the dialog you will see a form with two fields:
-
IP Address - enter a single IPv4 address (for example
203.0.113.10), a CIDR range (for example203.0.113.0/24), or an IP range (for example203.0.113.1-203.0.113.50). - Description - enter a short label for the entry, such as "Amsterdam office" or "Company VPN". The description is required and can be up to 100 characters.
Click Add to add the entry to the list. Repeat this step for every network that needs access.
Your current IP address is detected automatically and shown with a Current badge in the table. You cannot remove your own IP address, which prevents you from accidentally locking yourself out.
Step 3: Enable the firewall
Toggle the Enable switch at the top of the dialog. A warning will appear reminding you that users connecting from IPs that are not on the list will be blocked.
Step 4: Save your changes
Click Save to apply the new settings. Once saved, the IP firewall is active and only the listed IP addresses can access the project.
Manage the allow list
To make changes after initial setup, go to Settings > Security, click Edit on the IP Firewall card, and update the list:
- Add an entry - fill in the IP address and description fields and click Add.
- Remove an entry - click the delete button next to the entry you want to remove. You cannot delete the entry that matches your current IP address.
Remember to click Save after making changes. If you close the dialog without saving, Tekst will warn you about unsaved changes.
Disable the IP firewall
Open the IP allow list settings dialog and toggle the Enable switch off. Your saved IP entries are preserved and will be applied again if you re-enable the firewall later.
Supported IP formats
The IP firewall accepts three formats:
| Format | Example | Description |
|---|---|---|
| Single IP | 203.0.113.10 |
Allows one specific address |
| CIDR range | 203.0.113.0/24 |
Allows all addresses in the subnet |
| IP range | 203.0.113.1-203.0.113.50 |
Allows all addresses between the two endpoints |
Troubleshooting
If a user is blocked by the IP firewall, they will see an error message stating that their IP address is not in the allowed list. To resolve this:
- Ask the user for their public IP address.
- Go to Settings > Security > IP Firewall > Edit.
- Add the IP address or a range that includes it.
- Click Save.
If you have locked yourself out and cannot access the platform, contact Tekst support for assistance.
Tekst outbound IP addresses
If you need to allow traffic from Tekst to reach your own services (for example, webhook endpoints or custom step URLs), see Troubleshoot Firewall for a list of Tekst's fixed outbound IP addresses.