Allowing or blocking visitors (Access and protection)

Under Access and protection, you decide who may visit your website.

Before you start

• Your account package includes website security.
• You need the role owner or administrator.

Steps

1. Go to Domains and DNS.
2. Next to the domain, click Access and protection.
3. Set what you need:
   • Countries: All countries or Only selected countries;
   • IP addresses: addresses that are always allowed in or that you block;
   • Browser check: a short check against bots;
   • Crawlers: allow or block search engines and AI bots;
   • Rate limit: how many requests one visitor may make per 10 seconds.
4. Click Save in each block.

Good to know

• If you make a lot of requests yourself, for example during a test or an integration, set your own IP address to Always allow.
• If bots are putting load on your website, you see advice that you can apply with one click.
• Sometimes changes only take effect after your provider has approved them. The page then says so.
• If your provider has already restricted the countries, you see this at the top of the Countries block, with the countries that are allowed. Use Allow extra countries to add countries yourself.