How to Limit Web Chat to Your Websites and Rotate the Key

Summary

Overview: Your web chat embed code works on any website until you list the websites allowed to use it. Add your own websites so nobody else can run your chat. If your code was copied somewhere it shouldn't be, rotate the key to make every old copy stop working.

Prerequisites:

• You are signed in as the workspace Admin.
• Pippin Web Chat is set up on the Web chat card in Settings › Channels (click the Web chat tile).

Step-by-Step Instructions

Step 1: Add your websites

1. In the sidebar, go to Settings › Channels and click the Web chat tile. The Web chat card opens below the tiles.
2. Under Websites allowed to use this chat, type your website's address, such as acme.com. You can paste a full link like https://shop.acme.com/pricing; Pippify keeps only the site name.
3. Click Add, or press Enter. The site appears as a chip.
4. Repeat for each website, up to 20.
5. Click Save changes.

Step 2: Remove a website

1. Click the × on the website's chip.
2. Click Save changes.

Step 3: Rotate the key

1. On the Web chat card, click Rotate key.
2. Read Rotate the embed key? and Every snippet you have already installed will stop working. You will need to paste the new embed code into your website again.
3. Click Yes, rotate the key, or Cancel to keep the current key.
4. Under Your embed code, click Copy to copy the new code.
5. Replace the old code on every page of your website with the new code.

Verify It Worked

Success criteria:

• With websites listed, the card says Only these websites can open a chat. Subdomains are included.
• The chat opens on your listed websites. On other websites, it shows "This chat widget is not enabled for this website."
• After rotating, the code under Your embed code has changed, and the chat works on your website once the new code is in place.

Troubleshooting

Common errors

• "… doesn't look like a website address.": the entry isn't a valid site name. Fix: type it like acme.com.
• "… is already on the list.": the website is already listed.
• "You can list at most 20 websites.": remove a website before adding another. Subdomains are included automatically, so you only need the main domain.
• A red error appears under Save changes: the list didn't save. Fix: check the message, then click Save changes again.
• The chat stopped working on your site after rotating: the old code no longer works. Fix: copy the new code and paste it into your website.

Limitations & considerations

• When the list is empty, the card warns No websites listed, so anyone who copies your embed code can run this chat on their own site. Add your website to lock it down.
• Listing acme.com also allows its subdomains, such as shop.acme.com.
• The Preview on a demo page button always works, whatever websites you list.
• Rotating the key takes effect right away. Plan to update your website straight after.

Next Steps & Related Resources

• Next steps:
  • How to Set Web Chat Quick Questions
• Related articles:
  • How to Add Pippin Web Chat to Your Website

Need more help? For more information and assistance, please send an email to support@pippify.ai.

Last Updated: 10/15/2026