Restrict which email domains can register

Updated September 9, 2026

Allow only certain email domains to sign up, or block the ones you do not want, from the page’s access rules.

What it’s for

Email domain restrictions decide which email addresses may register at all. In allow mode only the domains you list get through, which turns a public page into an internal or partner-only one without a password to share. In block mode everyone gets through except the domains you list.

Use allow mode for an employees-only or customer-only session, and block mode to keep out free mailbox providers or a competitor, while the page itself stays public and indexable.

  1. Open your page in the builder, on step 4 · Settings. “Email domain restrictions” sits in the same access rules as the password and the registration limit.

  2. Turn the switch on, then choose the mode: “Allow only these” to let nobody else register, or “Block these” to refuse just the domains you list.

  3. Add the domains, one or several, such as acme.com. A wildcard is allowed: livestorm.* covers livestorm.co and livestorm.com, and *.acme.com covers sub.acme.com. The list reports how many domains it holds.

    acme.com, livestorm.*, *.partner.com
  4. Publish. A visitor whose address does not pass reads “This email address can’t be used to register for this event.” and is not registered.

Good to know

  • The rule is checked on the email address the visitor submits, so it applies to the form on your page and to an embedded form alike.
  • Matching is on the whole domain and ignores case: acme.com matches only acme.com, never sub.acme.com. Add *.acme.com for subdomains, and note that this pattern does NOT also cover the bare acme.com, so list both when you want each.
  • The refusal message never says which domains are allowed. Someone testing addresses learns nothing about your list.
  • An empty list turns the restriction off rather than refusing everyone, so clearing the field cannot accidentally close your page.
  • Up to 200 domains per page. Entries are lowercased and de-duplicated when saved.
  • With approval required as well, a request that fails the domain rule is declined with “This email domain is not allowed by access settings.” as its reason.

Related articles

Still need help?

Ask AI for a docs-grounded answer, or talk to our team.

Was this article helpful?