Trusted Connections for Your Account

What this list does

A trusted connection is an internet address you regularly use, such as your home or office connection. Adding it helps prevent a long sign-in block after repeated password mistakes. You still need the correct password and, where enabled, the code from your authenticator. Very frequent requests can still be slowed or stopped briefly.

Where to find the list

Open Account settings. The IP allowlist block is below two-factor authentication and above active sessions. All account mail lets the account owner cover every regular mailbox in every domain, including future mailboxes, or select individual mailboxes. My dashboard sign-in covers only your own dashboard login; it does not cover colleagues.

To select individual mailboxes, search by email address and tick the boxes you need. Your selections stay checked when you search again. Scroll the list and choose Show more to see further mailboxes.

For one mailbox, open Mailboxes > the mailbox > Security. The list is after app passwords. A staff member needs permission to manage trusted addresses. The mailbox user can also open Webmail > Settings > Security to add an address for their own mailbox. Addresses added by an administrator appear there too.

Add an address

Choose Add current IP for the connection you are using, or Add another IP if your internet provider or administrator gave you an address. Give it a useful name, such as Home or Office. Enter your current dashboard or mailbox password as requested, then your authenticator code if you use it. If your dashboard uses only a linked social account, confirm with that provider instead. Choose Save.

Limits and removal

Your personal dashboard list holds 5 addresses. The account mail list holds 10 different addresses in total, including addresses added by mailbox users. A mailbox user can add 3 addresses of their own. An address used by several mailboxes counts once toward the account total. Enter a single public IPv4 or IPv6 address, without a range, network mask, website name, or port.

Choose Remove beside an unused address and confirm your identity. Removing one mailbox binding leaves other mailboxes using that address unchanged. An address that covers all account mail is removed by the owner in account settings. Removing trust restores the usual sign-in protection; it does not change passwords or sign out existing sessions.

If your address changes

Home, mobile, and VPN connections can change address. Compare the current IP shown in settings with the address on your list and replace an outdated entry. This list covers dashboard sign-in, webmail, classic webmail, and supported mail app sign-in. It does not grant access to shared mailboxes, API tokens, Drive, calendar, or contacts, and does not remove a suspended account or another security restriction.

After a change, a security email is sent to you. Changes to account mail settings notify the owner; changes made in webmail notify that mailbox and its recovery address. The last saved sign-in helps you find addresses you no longer need.

Related guides

• Fixing Problems Signing In to Email
• IMAP / SMTP