This topic describes how to set subnet masks for an Alibaba Cloud account to specify the IP addresses from which access is allowed. The subnet masks help you enhance account security.


  1. Log on to the RAM console with an Alibaba Cloud account.
  2. Move the pointer over the profile picture in the upper-right corner of the console, and click Security Settings.
  3. In the Login Mask section of the Security Settings page, click Set.
  4. On the Login Mask page, specify one or more valid subnet masks.
    Note If you want to specify more than one subnet mask, separate the masks with semicolons (;), for example,;
  5. Click Save.
    Note If you use the password or single sign-on (SSO) to log on to the Alibaba Cloud console, you can initiate access requests only from the IP addresses that are specified by the subnet masks. You can also use AccessKey pairs to call API operations to access Alibaba Cloud resources.