> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neuraltalk.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# 🔒 Security

> Guide to control where your chatbot is allowed or blocked from operating

🎥 Refer to the setup video for a step-by-step visual guide:

<div
  style={{
position: "relative",
paddingBottom: "56.25%", // 16:9 aspect ratio
height: 0,
marginTop: "16px",
borderRadius: "14px",
overflow: "hidden",
}}
>
  <iframe
    src="https://www.youtube.com/embed/_GEaQqeTKbc?si=RGlsPYa81UkabxCZ"
    title="Security Settings"
    frameBorder="0"
    allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
    allowFullScreen
    style={{
  position: "absolute",
  top: 0,
  left: 0,
  width: "100%",
  height: "100%",
  borderRadius: "14px",
}}
  />
</div>

## Overview

The **Security** settings help you control exactly where your chatbot can be used.

You can allow specific domains, block unwanted websites, and ensure your chatbot only appears in trusted environments.

This prevents unauthorized embedding and protects your chatbot from misuse.

***

## Accessing Security Settings

<Steps>
  <Step title="Open Security Settings">
    * Log in to your dashboard
    * Go to **Settings**
    * Select **Chatbot Settings**
    * Click on **Security**
  </Step>

  <Step title="Configure Domain Rules">
    * Choose which domains are allowed
    * Block domains you want to restrict
  </Step>
</Steps>

<img src="https://mintcdn.com/neuraltalk/AQvs9ZJbqv8QqisP/images/securitySettings.png?fit=max&auto=format&n=AQvs9ZJbqv8QqisP&q=85&s=04d9c45182e020d039865f048c4f4fcd" alt="Security Settings Page" width="1668" height="787" data-path="images/securitySettings.png" />

## Allowed Domains (Allowlist)

Use the allowlist to specify where your chatbot **is permitted** to run.

### Enable Domain Allowlist

<CardGroup cols={2}>
  <Card title="Restrict to Safe Domains" icon="shield-check">
    The chatbot will only work on domains you explicitly approve.
  </Card>

  <Card title="Add Domain" icon="plus">
    Add domains where the chatbot should be active.
  </Card>
</CardGroup>

## Restricted Domains (Blocklist)

Block your chatbot from appearing on specific websites even if it is embedded.

### Enable Domain Blocklist

<CardGroup cols={2}>
  <Card title="Block Unwanted Domains" icon="ban">
    Prevent the chatbot from loading on specific domains.
  </Card>

  <Card title="Block Domain" icon="minus-circle">
    Add domains to restrict chatbot access.
  </Card>
</CardGroup>

If no domains are added:

> **No restricted domains configured**\
> The chatbot won’t automatically block any sites.

## When to Use Each Option

<AccordionGroup>
  <Accordion title="Use Allowlist When">
    * You only want the chatbot available on **your owned domains**
    * You’re concerned about unauthorized embedding
    * Security and control are top priorities
  </Accordion>

  <Accordion title="Use Blocklist When">
    * Your chatbot is broadly embedded, but some domains must be blocked
    * You want flexibility without strict restrictions
  </Accordion>
</AccordionGroup>

## Best Practices

* Prefer **allowlists** for maximum control and security
* Review domain lists regularly
* Add staging/test domains during development
* Remove unused or outdated domains to avoid confusion