## Chat widget domain whitelisting

Domain whitelisting allows you to secure your chatbot and ensures that the chatbot can be accessed only in authorized domains. It prevents unauthorized users from copying the script and embedding the bot on their websites or mobile applications.

Yellow.ai allows businesses to whitelist a list of domains to host their chatbot on a particular website. Let's say you want a list of domains where you can load the bots so that other website users cannot copy the script and use the bot on their websites. In such a case, you can whitelist the respective domain.

:::note
* When a domain (example: yellow.ai) is whitelisted, all its subdomains (example: cloud.yellow.ai, live.yellow.ai) will also be included by default.
* By default, Yellow.ai and Yellow Messenger are whitelisted to allow you to preview your chatbot.
:::

## Whitelist domain(s) to deploy chat widget

To whitelist specific domains for the chat widget, follow these steps:

1. On the module switcher, click **Channels**.


2. Click on **Chat widget**.


3. Navigate to the **Whitelist Domain** tab and enter the domain that you want to whitelist, then click **+Add**. You can also add multiple domains based on your requirements.


4. The domain will be successfully whitelisted.


5. To test your chatbot locally, you need to enable **Allow localhost**. Note that, you need to disable it after deployment.


## Delete whitelisted domains

To delete whitelisted domains, follow these steps:

1. If you wish to delete the added domain, click **Delete** icon.


2. A pop-up is displayed with a confirmation message **Are you sure you want to delete "app.yellowmessenger.com"?**, click **Delete**.

<img src="https://i.imgur.com/xA2D6Po.png" alt="drawing" width="60%"/>

3. The domain will be successfully deleted.