How to Set a Domain Allowlist

A domain allowlist restricts your video embeds to pages served from specific domains. When a domain list is set, any embed request from an unlisted origin is blocked. Use this to prevent your videos from being embedded on unauthorized sites.

Set a team-wide domain allowlist

1. In the sidebar, click Access Rules.
2. Make sure Visibility is set to restricted. The domain allowlist only takes effect when visibility is restricted.
3. Under Domain Allowlist, type a domain (e.g. example.com) into the input field and click Add or press Enter. Repeat for each domain you want to allow.
4. To remove a domain, click the × next to it.
5. Click Save at the bottom of the page.

If any videos have per-video access rule overrides, a dialog will appear after saving. Click Update all next to the domain allowlist entry to push the new team defaults to those videos, or Leave as-is to keep their existing overrides.

Override the domain allowlist for a single video

Individual videos can have a different domain allowlist from the team default.

1. Open the video detail page.
2. In the Access Rules section of the right sidebar, click Edit.
3. Check Override domain allowlist.
4. Add or remove domains as needed. These domains replace the team-wide list for this video only.
5. Click Save.

To revert a video to the team default, uncheck Override domain allowlist and save.

Domain format

Enter bare hostnames without a scheme or path (e.g. example.com or cdn.example.com). Domains are case-insensitive. Subdomains are not matched automatically — if you want both example.com and www.example.com, add each one separately.