Storefront IP blocking

Purpose

Block the public storefront for selected individual IPv4 or IPv6 addresses without blocking admin access or payment webhooks.

How it works

1. The module is disabled by default and accepts only individual IP addresses.
2. It covers public storefront pages but excludes admin access, static assets and payment webhooks.
3. The encrypted list is stored only in the database of that store.
4. Disabling the module stops enforcement without deleting the saved list.

Step-by-step configuration

1. Open Add-ons and select Storefront IP blocking.
2. Add a valid IPv4 or IPv6 address and enable the module.
3. Test both the storefront and admin access from a controlled address.
4. Grant view and management permissions only to trusted team members.

Required permissions

• View blocked IP addresses
• Manage blocked IP addresses

Important information

Access depends on enabled store features, the user role and permissions assigned in Team.