Embed Domain Restrictions (Pro & Enterprise)

Domain restrictions let you control exactly which websites can embed your demos. When enabled, any attempt to embed a demo on a domain that isn’t on your approved list will be blocked.

This applies to all embed types: demos, prescreens, and collections.

Setting Up Domain Restrictions

1. Go to Settings > Access Controls.
2. Under Viewer Restrictions, add the domains where you want to allow embedding.
3. Once at least one domain is added, embedding is restricted to those domains only.

You can add domains in several formats:

• Bare hostname: example.com (allows any protocol)
• With protocol: https://example.com (requires HTTPS specifically)
• With port: localhost:3000 (useful for development)

To remove a restriction, delete it from the list. If no domains are configured, embeds work on any website (the default behavior).

Share Link Protection

When domain restrictions are enabled, share links are also protected. Viewers must be signed in to HowdyGo and belong to your organization to access share pages, offline demos, and collections. Viewers who aren’t signed in will be redirected to sign in, and viewers from other organizations will not be able to access the content.

What Viewers See

When someone tries to embed your demo on a domain that isn’t approved, they’ll see an error message instead of the demo content. This prevents unauthorized sites from displaying your demos.

Admin Role Required

Only team members with the Admin role can add or remove domain restrictions. Team members with the Editor role can view the current settings but cannot make changes. You can manage roles from Settings > Team Management.

Best Practices

• Add all domains where you actively embed demos before enabling restrictions, including staging and development domains.
• If you use a custom domain, add it to the approved list as well.
• Remember that subdomains are treated separately. If you embed on both www.example.com and docs.example.com, add both.