Set up the IP firewall

The IP firewall restricts access to your Tekst project so that only users connecting from approved IP addresses can log in. When enabled, any request from an IP address that is not on the allow list is blocked. Use this feature to limit access to your office networks, VPNs, or other trusted locations.

Prerequisites

• A Tekst account with the Admin role. The Security settings, where the IP firewall is managed, are only available to admins.

Enable the IP firewall

Step 1: Open the IP firewall settings

Go to Settings > Security. In the IP Firewall card, click Edit to open the IP allow list settings dialog.

Step 2: Add your IP addresses

Before enabling the firewall, add every IP address or range that should be allowed to access your project. Your current IP address is added to the list automatically. In the dialog you will see a form with two fields:

• IP Address - enter a single IPv4 address (for example 203.0.113.10), a CIDR range (for example 203.0.113.0/24), or an IP range (for example 203.0.113.1-203.0.113.50).
• Description - enter a short label for the entry, such as "Amsterdam office" or "Company VPN". The description is required and can be up to 100 characters.

Click Add to add the entry to the list. Repeat this step for every network that needs access.

Your current IP address is detected automatically and shown with a Current badge in the table. You cannot remove your own IP address, which prevents you from accidentally locking yourself out.

Step 3: Enable the firewall

Toggle the Enable switch at the top of the dialog. A warning will appear reminding you that users connecting from IPs that are not on the list will be blocked.

Step 4: Save your changes

Click Save Changes to apply the new settings. Once saved, the IP firewall is active and only the listed IP addresses can access the project.

The IP Firewall card on the Security tab now lists the allowed addresses.

Manage the allow list

To make changes after initial setup, go to Settings > Security, click Edit on the IP Firewall card, and update the list:

• Add an entry - fill in the IP address and description fields and click Add.
• Remove an entry - click the delete button next to the entry you want to remove. You cannot delete the entry that matches your current IP address.

Remember to click Save Changes after making changes. If you close the dialog without saving, Tekst will warn you about unsaved changes.

Disable the IP firewall

Open the IP allow list settings dialog and toggle the Enable switch off. Your saved IP entries are preserved and will be applied again if you re-enable the firewall later.

Supported IP formats

The IP firewall accepts three formats:

Format	Example	Description
Single IP	203.0.113.10	Allows one specific address
CIDR range	203.0.113.0/24	Allows all addresses in the subnet
IP range	203.0.113.1-203.0.113.50	Allows all addresses between the two endpoints

Troubleshooting

If a user is blocked by the IP firewall, they will see an error message stating that their IP address is not in the allowed list. To resolve this:

1. Ask the user for their public IP address.
2. Go to Settings > Security > IP Firewall > Edit.
3. Add the IP address or a range that includes it.
4. Click Save Changes.

If you have locked yourself out and cannot access the platform, contact Tekst support for assistance.

Tekst outbound IP addresses

If you need to allow traffic from Tekst to reach your own services (for example, webhook endpoints or custom step URLs), see Troubleshoot Firewall for a list of Tekst's fixed outbound IP addresses.