How to Add Trusted Domains to Your Live Chat Widget

Trusted Domains help secure your live chat widget by restricting where it can be embedded or accessed. This ensures only your approved websites can display and interact with the chat service, protecting your brand and customer data.

Why Use Trusted Domains?

Display Live Chat only on approved websites.
Protect customer chats from unauthorized domains.
Restrict chat to specific pages, sections, or subdomains.
Prevent the widget from appearing on test or staging sites.
Ensure secure widget access with HTTPS and trusted origins.
Manage chat availability across multiple company websites.
Quickly identify and fix domain-related widget loading issues.

Steps to Configure Trusted Domains

Follow these steps to enable and set up trusted domains for your widget:

Navigate to: Admin > Chat > Live Chat.
Choose an existing widget or click Add Widget.
Navigate to Preference > Security under Chat Bot settings.
Toggle Enable Trusted Domains.
Add a trusted domain in the provided text field.

Use appropriate domain patterns:

Domain Pattern	Access Rule
`example.bolddesk.com`	Exact match (works for both HTTP and HTTPS)
`https://example.bolddesk.com`	HTTPS-only match
`*.bolddesk.com`	All subdomains of `bolddesk.com`
`*.bolddesk.com/sales`	All subdomains with `/sales` path
`example.bolddesk.com/sales*`	URLs starting with `/sales` (includes subpaths)
`example.bolddesk.com/sales`	Exact path only (no subpaths)

Click Add Domain to include multiple entries.

After a Trusted Domain is added, the live chat widget will render on that specific domain.
Outside of the specified domain, the live chat widget will not render, and a console error indicating “not found” will be displayed.

Required: Update Your CORS Policy

Enabling Trusted Domains is not sufficient on its own. You must also configure your CORS (Cross-Origin Resource Sharing) headers and Referrer-Policy to allow the chat widget to communicate securely across origins.

Refer to this guide to update your CORS settings appropriately: Troubleshooting Guide: Fix Live Chat Widget Loading Issues

Permission for Adding Trusted Domain in Live Chat Widget

To be able to add a trusted domain in the live chat widget, ensure that the Manage Settings permission is enabled in the admin module.

Troubleshooting

Live Chat widget does not load on a website
- Confirm the website domain (and path, if used) matches a Trusted Domain entry exactly according to the configured pattern.
- If the URL is outside the allowed list, the widget will not render, and a console “not found” error is expected behavior.
Live Chat widget still fails after adding the domain
Verify CORS and Referrer-Policy are configured as required: Explore Troubleshooting Guide: Fix Live Chat Widget Loading Issues
Cannot add or edit Trusted Domains
Ensure the admin user role has Manage Settings enabled in the admin module.

Frequently Asked Questions

What happens if I do not add my website domain to Trusted Domains?
The Live Chat widget will not load on that website, and developer tools show a “not found” console error.
Can I allow all subdomains of a domain?
Yes. Use a wildcard pattern such as *.example.com.
Does adding https:// change matching behavior?
Yes. https://example.bolddesk.com enforces an HTTPS-only match.
Do I still need CORS if Trusted Domains are enabled?
Yes. Trusted Domains control where the widget can render. CORS controls cross-origin communication required for the widget to function.
Can I restrict widget loading to specific paths (for example /help)?
Yes. Path-based patterns such as example.bolddesk.com/help or example.bolddesk.com/help* allow more granular control.
Can I add multiple allowed domains?
Yes. Use Add Domain to add multiple Trusted Domain entries.
What is the expected behavior on an untrusted domain?
The Live Chat widget does not render, and the browser console shows a “not found” error.

Was this article useful?

Dislike

Comments (0)