Create a whitelist rule
Overview
A whitelist rule lets trusted visitors in (your office IP, a partner's country, a monitoring tool) even when a block or redirect rule would stop them. Whitelist rules are checked before block rules. You create them in Block & Re-director > Whitelist.
What you'll learn
- How to create a whitelist rule?
- How to whitelist a visitor from the visitor log?
- How it works?
- Who can use this feature?
How to create a whitelist rule?
Step 1: Go to Block & Re-director > Whitelist and click the card you need.
Step 2: Set Status to Enable, or Disable to save the rule for later.
Step 3: Fill in the condition. The fields are the same as in the matching block rule:
Card | Conditions |
|---|---|
Whitelist IP address | IP address, IP start with, IP Range (Manual or Upload CSV) |
Whitelist location | Country, Province (optional city) |
Whitelist products | Specific Products, Specific Collection, by country |
Whitelist user agent | Browser, Substring, Regex |
Whitelist specific page | Specific Pages, Custom URL, by country |
Whitelist ISP | Country, then ISP |
Whitelist referrer URL | Exact URL, URL Contains |
See the block article for each rule type, for example Block or redirect by IP address.
Step 4: Tick Whitelist if these accesses use VPN. to let the visitor in even when the Proxy and VPN blocker in Settings > Risk Mitigator would stop them. Unticked, a VPN or proxy connection is still blocked.
Step 5: Add a private note if you want and click Save.
How to whitelist a visitor from the visitor log?
If a real customer was blocked, open the visitor log in Analytics, switch to the Blocked visitors tab and click the Unblock icon in the Action column of their row. In the Unblock dialog ("This IP address will be added to the whitelist for access."), click Unblock. Blockify creates a Whitelist IP address rule for you and shows "IP added to your Whitelist rules."
From then on, their row in Allowed visitors shows a tick next to the IP address. Hover it to see which rule matched; the Access reason filter lists every visitor let in by a whitelist rule.
How it works?
- Whitelist rules are checked before block and redirect rules: a matching visitor is let in even when their IP, country, internet provider or browser is also in a block rule.
- The tick in Allowed visitors appears only for a normal whitelist match. Visitors let in only because of the Whitelist if these accesses use VPN. tick, good bots, and IPs under Exclude in a block rule get no tick.
- Content protection has its own setting for who it covers. Settings > Content protection > Apply content protection to decides whether whitelisted visitors are covered: All visitors, or Only visitors that are not whitelisted. Editing whitelist rules does not change it.
Who can use this feature?
Available on all plans; the Free plan allows 2 active rules. The tick in Allowed visitors needs the Premium plan or above.
FAQs
- I blocked a country but someone from it still got in. Why?
Check Allowed visitors for a tick next to their IP: one of your whitelist rules matched first. Edit or disable that rule.
- Does a whitelist rule get a visitor past the Proxy and VPN blocker?
Only if Whitelist if these accesses use VPN. is ticked on the rule.
- Can I whitelist my own IP so I never get blocked?
Yes, with Whitelist IP address. Blockify also gives you an Admin's access URL that is never blocked. See How can I access my store if I have blocked my own country?.
Updated on: 16/10/2026
Thank you!