> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://help.omegatheme.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Create a whitelist rule

## Overview

A whitelist rule lets trusted visitors in (your office IP, a partner's country, a monitoring tool) even when a block or redirect rule would stop them. Whitelist rules are checked before block rules. You create them in **Block & Re-director > Whitelist**.

## What you'll learn

* [How to create a whitelist rule?](#2-how-to-create-a-whitelist-rule)
* [How to whitelist a visitor from the visitor log?](#2-how-to-whitelist-a-visitor-from-the-visitor-log)
* [How it works?](#2-how-it-works)
* [Who can use this feature?](#2-who-can-use-this-feature)

## How to create a whitelist rule?

Step 1: Go to **Block & Re-director > Whitelist** and click the card you need.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/20250910-133305_uyzq4j.png)

Step 2: Set **Status** to **Enable**, or **Disable** to save the rule for later.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/20250910-133408_s1l88i.png)

Step 3: Fill in the condition. The fields are the same as in the matching block rule:

| Card | Conditions |
| ---- |
| **Whitelist IP address** | IP address, IP start with, IP Range (**Manual** or **Upload CSV**) |
| **Whitelist location** | Country, Province (optional city) |
| **Whitelist products** | Specific Products, Specific Collection, by country |
| **Whitelist user agent** | **Browser**, **Substring**, **Regex** |
| **Whitelist specific page** | Specific Pages, Custom URL, by country |
| **Whitelist ISP** | Country, then ISP |
| **Whitelist referrer URL** | Exact URL, URL Contains |

See the block article for each rule type, for example [Block or redirect by IP address](https://help.omegatheme.com/en/article/block-or-redirect-by-ip-address-38tkhf/).

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/20250910-133507_olqt8a.png)

Step 4: Tick **Whitelist if these accesses use VPN.** to let the visitor in even when the Proxy and VPN blocker in **Settings > Risk Mitigator** would stop them. Unticked, a VPN or proxy connection is still blocked.

Step 5: Add a private note if you want and click **Save**.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/20250910-144020_106ke7b.png)

## How to whitelist a visitor from the visitor log?

If a real customer was blocked, open the visitor log in **Analytics**, switch to the **Blocked visitors** tab and click the **Unblock** icon in the **Action** column of their row. In the **Unblock** dialog ("This IP address will be added to the whitelist for access."), click **Unblock**. Blockify creates a **Whitelist IP address** rule for you and shows "IP added to your Whitelist rules."

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/20251106-110031_g5akiq.png)

From then on, their row in **Allowed visitors** shows a tick next to the IP address. Hover it to see which rule matched; the **Access reason** filter lists every visitor let in by a whitelist rule.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/whitelist-tick-allowed-table_122npiw.png)

## How it works?

* Whitelist rules are checked before block and redirect rules: a matching visitor is let in even when their IP, country, internet provider or browser is also in a block rule.
* The tick in **Allowed visitors** appears only for a normal whitelist match. Visitors let in only because of the **Whitelist if these accesses use VPN.** tick, good bots, and IPs under **Exclude** in a block rule get no tick.
* Content protection has its own setting for who it covers. **Settings > Content protection > Apply content protection to** decides whether whitelisted visitors are covered: **All visitors**, or **Only visitors that are not whitelisted**. Editing whitelist rules does not change it.

![](https://storage.crisp.chat/users/helpdesk/website/-/8/3/8/3/8383e5404a31c000/content-protection-scope_1ewem0o.png)

## Who can use this feature?

Available on all plans; the Free plan allows 2 active rules. The tick in **Allowed visitors** needs the **Premium** plan or above.

## FAQs

1. **I blocked a country but someone from it still got in. Why?**

Check **Allowed visitors** for a tick next to their IP: one of your whitelist rules matched first. Edit or disable that rule.

2. **Does a whitelist rule get a visitor past the Proxy and VPN blocker?**

Only if **Whitelist if these accesses use VPN.** is ticked on the rule.

3. **Can I whitelist my own IP so I never get blocked?**

Yes, with **Whitelist IP address**. Blockify also gives you an **Admin's access URL** that is never blocked. See [How can I access my store if I have blocked my own country?](https://help.omegatheme.com/en/article/how-can-i-access-my-store-if-i-have-blocked-my-own-country-ae313d37-1ibz4bf/).