Hello there, this is definitely a must-have feature for multiple purposes:

• security, in adding a layer of authorization on the login form, which is pretty handy in case of bruteforce.
• before even allowing any registered user, it filters the people from where they can connect from. In big companies, such I work with, they all do connect from a VPN, Firewall, etc, which is mandatory to use an application.

This could be done in two way:

• for the self-hosting, an htaccess config documented in a FAQ.
• for other instances, a global configuration where we edit an IP list. Of course, a check could be done on the current IP to prevent any self lockdown.

@MaximeCulea
Regarding .htaccess restriction there are some notes in this FAQ: https://matomo.org/docs/security-how-to/#other-tips
To restrict the login for certain IPs you can use the config: https://matomo.org/faq/how-to/faq_25543/

@sgiehl awesome, that's what I was talking about. Thank you!
Badly, the internal search tool and Google search did not allowed me to find this documentation :/

Anyway, I have like 32 IPs to add, is there a way to add some comments into the config.ini.php to arrange them?

Anyway, I have like 32 IPs to add, is there a way to add some comments into the config.ini.php to arrange them?

sure. You can start comments using ;

Many thanks !! @sgiehl
Hope I didn't carjack the issue of @robertharm :)

ok for me @MaximeCulea ;-)
Thanks for the update - did not know that login_whitelist_ip[] exists - so the issue could actually be closed IMO

Thanks @robertharm