IP Allowlist

This feature is available on request — contact our team to enable it for your organization.

What it does

IP Allowlist lets your team members access your organization only from approved networks, like your office or corporate VPN. They can sign in and use their Beachside accounts only when connecting from your approved IP ranges. Requests from any other network are blocked.

Access is checked at login and throughout the session, so moving onto an unapproved network blocks you at that point.
Each organization is enforced independently — being blocked from one never affects the others.

How to setup the IP allowlist for your organization

Only organization admins can manage the allowlist . To set it up, share the IP ranges of your organization with our customer success team, and they'll guide you through the setup process.

Send us your IP range

Share your list of approved network IPs with our customer success team, make sure to include offices, VPN gateways and both IPv4 and IPv6 ranges. We'll help validate the list as the next step.

We validate your ranges during a calibration phase

In this calibration phase, your team keeps working as normal while the IP enforcement stays off. Meanwhile, our team checks which networks members actually connect from — so we can catch any missing network IP and add them into the list before enforcement goes live.

Review & Confirm

We'll share what we found that wasn't in your original list for you to approve, including any gaps, missing VPN, and unlisted VPNs.

IP protection goes live

Once you've confirmed your list, we'll turn enforcement on. From then on, access is limited to your approved networks.

Access Beachside from an approved network

Once IP protection is enabled for your organization, a few habits keep your access smooth and avoid unexpected blocks:

Connect to your office network or corporate VPN before opening Beachside, and stay on it while you work.
Turn off personal VPNs and proxy tools. These reroute your traffic through outside networks, which can block you even when you're sitting in the office.
Watch for VPN drops. If your VPN disconnects and reconnects, it may come back on a different network — reconnect to your approved one if you get blocked.
Working remotely? Check with your administrator that your home or travel network is approved, or connect through your corporate VPN.

Not sure if you're on an approved network? Confirm with your administrators which networks are in the organization's allowlist.

How to restore access for blocked users

Being blocked never loses their work — anything in progress is saved automatically first.

First, check the member's IP address against your organization's allowlist — their current IP is shown on the blocked screen.

The IP should be added to the list → contact Beachside team to add it to the list.
The IP is invalid → have the member reconnect to an approved network, such as your office network or corporate VPN.

Once the member is on an approved network, their access is restored automatically and they're returned to where they left off — no need to log in again.

FAQ

I'm on an approved network but still blocked. Why?

A network change isn't always obvious. A VPN connecting, dropping, or reconnecting through a different gateway can change your IP without you noticing, and personal VPNs or some privacy tools can route your traffic through an unapproved exit point even while you're physically on an approved network. Check the IP on the blocked screen against your approved networks, and contact your administrator if it looks wrong.

How long does the calibration phase take?

We watch for at least two weeks to make sure we've captured every network your team connects from. Once we're confident the list is complete and nothing new is showing up, we'll send it to you to review and confirm before enforcement goes live.

What will I or my team see if being blocked?

What you see depends on your situation:

Other organizations still reachable → you're be redirect to the available organization page automatically.
All organizations blocked → you'll see a full-page screen shows your current IP and how to regain access.
Your active organization blocked mid-session → Your current page will be blocked, resolving the network condition will bring you back to the session.

Are IPv4 and IPv6 both supported?

Yes. Your approved ranges can include office locations, VPN gateways, and other trusted networks on both IPv4 and IPv6. Your current IP is shown on the blocked screen in the matching format — x.x.x.x for IPv4, y:y:y:y:y:y:y:y for IPv6.

Will I lose my work if I get blocked while using beachside?

No. Anything in progress, including generations, is saved automatically before you're blocked from the page.

Do I have to log in again after reconnecting?

No. Your session stays valid, so reconnecting to an approved network restores access without re-entering your password or MFA.