> ## Documentation Index
> Fetch the complete documentation index at: https://pipedform.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Domain Restriction

Restrict your form to only accept submissions from your own domain, so it can't be embedded or abused from unauthorized websites.

By default, any website can submit to your form endpoint. Domain restriction lets you lock it down to only your own domain(s), adding an extra layer of protection against misuse.

<Note>
  This is available on the **Paid** plan.
</Note>

## Setting Up Domain Restrictions

Follow these steps to restrict your form to only accept submissions from domains you trust.

<Steps>
  <Step title="Go to Security Settings">
    Open your form's Settings page, then navigate to the **Security** section.

    <Frame>
      <img src="https://mintcdn.com/pipedform/QFn6ZmFrAQb_R7X6/images/image-1.png?fit=max&auto=format&n=QFn6ZmFrAQb_R7X6&q=85&s=13949c4e7354d11ebe53f20c22397dcb" alt="Image 1" title="Image 1" className="mx-auto" style={{ width:"87%" }} width="688" height="78" data-path="images/image-1.png" />
    </Frame>
  </Step>

  <Step title="Add Your Allowed Domains">
    In the **Domain Restrictions** field, enter the domains or subdomains you want to allow, separated by commas.

    ```text theme={null}
    example.com, blog.example.com, app.example.com
    ```
  </Step>

  <Step title="Save Your Changes">
    Once saved, PipedForm will only accept submissions coming from the domains or subdomains listed. Requests from any other domain will be rejected.
  </Step>

  <Step title="Test Your Form">
    Submit a test entry from your website to make sure the submission goes through successfully. If you've entered the domain incorrectly, or your form is embedded on a different domain, the submission will be blocked.
  </Step>
</Steps>

<Warning>
  **Notes:**

  * Each entry must be a valid domain or subdomain (e.g. `example.com` or `app.example.com`).
  * Leave this field empty to accept submissions from any domain.
  * If you're testing locally or from a different environment, make sure to add that domain temporarily, or your test submissions will be rejected.
</Warning>