IP whitelisting is a security control that permits access to a system or network only from a specific list of approved IP addresses. Any request that comes from an address not on that list is blocked.

IP whitelisting is a common way to lock down admin panels, VPN endpoints, and payment systems to the addresses your own team uses. It is a strong first gate, but it has to be updated as your addresses change, and it should be paired with MFA and other layered controls rather than trusted on its own.