IP Access Management

IP Access Management is a security feature that allows you to control who can access your SendGrid account based on their IP address. After you allow an IP address, you can only access the SendGrid UI, API, and SMTP relay if you are connecting from an allowed IP address. Any access attempts from other IPs will be blocked. This is a powerful security tool that you can use to help prevent malicious activity on your account.

If you do not access SendGrid via a static IP address (for example, via VPN or from a business internet service), setting up IP Access Management may result in being locked out of your SendGrid account. If you have locked yourself out of your account, please contact SendGrid Support.

To enable IP Access Management and add allowed addresses

1. Navigate to the Settings > IP Access Management in the Twilio SendGrid App.
2. You will see a message explaining IP Access Management under Allow Listed IP Addresses until you enable IP Access Management. IP Access Management will be enabled once you add one or more allowed IPs.
3. Under Recent Access Attempts, you will see a list of IPs that recently attempted to connect to your account, regardless of whether they are allowed addresses or not. You will also see some additional information about those IPs, such as the date of the first and most recent access attempt, the physical location of the IP, and the method by which they attempted to access your account.

1. Click Add IP Addresses.

Expand image

2. A dialog will appear. Check the two radio boxes to acknowledge that you understand this feature and select Confirm and Continue.
3. The Add IP Addresses menu will appear showing Your Current IP and a list of the Recently Accessed IPs.
4. You can add recently accessed IPs by clicking the + next to the IP you wish to allow.
5. You can add all the listed recent addresses by clicking Add all to form below.
6. Any added IPs will appear in the table labeled IP addresses or ranges to add.
7. You can enter a single IP address or range of IP addresses that don't appear in your recently accessed list by clicking Manually add IPs.

Expand image

8. A field labeled IP addresses or ranges to add: will appear.
9. Add your desired IP or range of IPs in CIDR notation. See the "Add a range of IP addresses" section of this page for more about CIDR notation and working with ranges. Separate individual IPs and ranges using either a comma, space, or new line.
10. Once you have added all your desired IP addresses, click Add <number> IPs at the bottom of the menu.

Expand image

11. You will be returned to the Add IP Addresses menu. Your manually added IPs will now appear in the table labeled IP addresses or ranges to add.
12. Your IPs are now staged to be added. Click Save to finalize adding the addresses to your list of allowed IPs.

Expand image

You can add a range of IP addresses using CIDR notation or a wildcard character.

To enter a range of IP addresses using CIDR notation:

1. Navigate to the Settings > IP Access Management in the Twilio SendGrid App.
2. Click + Add IP Addresses.
3. The Add IP Addresses menu will appear. Click Manually add IPs.
4. A field labeled IP addresses or ranges to add: will appear.
5. Enter your routing prefix followed by a / and the number of bits in your routing mask. For example: 192.168.100.14/24.

Explaining CIDR notation is beyond the scope of this article, and we only recommend that advanced users use this notation when allowing IPs. If you are unfamiliar with CIDR notation, we recommend that you enter each IP individually when allowing a range of IPs.

To enter a range of IP addresses using a wildcard character:

1. Navigate to the Settings > IP Access Management in the Twilio SendGrid App.
2. Click + Add IP Addresses.
3. The Add IP Addresses menu will appear. Click Manually add IPs.
4. A field labeled IP addresses or ranges to add: will appear.
5. Enter your IP followed by an asterisk. For example, 25.203.44.* will include all IPs that begin with 25.203.44.

Once IP Access Management is enabled, you can add individual addresses from the Recent Access Attempts list to your list of allowed IPs.

1. From the Settings > IP Access Management page, navigate to an address in the Recent Access Attempts list.
2. Click the action menu to the right of the address you want to allow and select Add To Allowed List.

Expand image

1. From the Settings > IP Access Management page, navigate to the Allow Listed IP Addresses list.
2. Click the action menu to the right of the allowed address you want to remove and select Remove From Allow List.

Expand image

3. Another dialog will open asking you to confirm the removal. Select Remove IP to continue.

You can disable IP Access Management to reopen account access to any IP address and no longer maintain a list of allowed addresses.

1. From the Settings > IP Access Management page, click Disable Allow List.
2. A dialog will open asking you to confirm the decision. Click Disable.

Expand image

For additional information about using IP Access Management through our API, see our API Reference.