Which IP ranges should be whitelisted in Stripe?
It is strongly recommended that IP address restrictions be implemented to secure your API key, rather than having the gateway open to all IP addresses.
You may have recently received an email from Stripe similar to the following:
Based on API activity for *Your Website Name*, we recommend adding IP address restrictions to secure one of your API keys.
API key: *your API key*
Recommended IP addresses: 45.8.227.175
Adding IP address restrictions prevents your key from being used outside specific addresses.
This protects your account if the key is accidentally exposed. Due to the distributed nature of our network, outbound connections will not originate from the IP address assigned to your hosting package that you see under "Account Information" on the package overview. They will instead originate from a different IP address, typically 45.8.227.175 - however, this is subject to change. This is because the public IP address for your hosting package is one of our load balancer's IP addresses, which is only used for incoming web traffic via our CDN.
To be best covered, we recommend whitelisting the following IP ranges:
- 185.146.165.0/24
- 185.151.28.0/24
- 45.8.225.0/24
- 45.8.227.0/24
You can read more about our external connection IP addresses, including platform-specific information, here.
