How do I create an allowed websites list in SiteKiosk Online?

How do I create an allowed websites list in SiteKiosk Online so users can only reach the pages I choose? This short tutorial walks through the exact settings, URL patterns, and wildcards shown in the video so you can reliably lock down your kiosk browser to approved domains, subdomains, and subdirectories.

1. Log in and open your project

Log in to your existing SiteKiosk Online account.
Go to the Projects menu.
Create a new project (any template works) or open an existing one.
Wait for the project editor to open so you can see the design area in the center and the settings on the right.

2. Open the browser settings

At the top of the editor, click the Settings button.
In the Settings menu, go to the Browser section.
Scroll down until you find Permitted / forbidden Internet addresses.

3. Block all websites by default

In the Permitted / forbidden Internet addresses section, change the option so that all web addresses are blocked by default.
Remember: even when everything is blocked, any URL you have configured as a button link in your project is still allowed for that exact address only.
This means the start page for that button will work, but other pages on the same site will not unless you explicitly allow them.

4. Understand why you need an allowed list

Simply hiding or removing the URL bar is not enough, because users can still click links that lead to external sites (social media, external resources, etc.).
To keep users only on the pages you want, you must create an allowed websites list (also known as a whitelist).
The allowed list controls which domains, subdomains, and subdirectories are actually reachable from the kiosk.

5. Start adding allowed websites

In the same Permitted / forbidden Internet addresses section, begin adding the websites you want to allow.
You can use wildcards in the URL entries to control what is allowed:
- Wildcard the protocol (for example, *://) if both HTTP and HTTPS should be allowed.
- Wildcard subdomains (for example, *.sitekiosk.com) if the site uses multiple subdomains.
- Wildcard subdirectories (for example, https://www.sitekiosk.com/*) if you want to allow all pages under a path.

6. Handle protocol and subdomain variations

SiteKiosk treats different protocols as different sites (for example, http:// and https:// are separate).
If you want both to work, use a protocol wildcard so you do not accidentally block one of them.
Subdomains such as www.sitekiosk.com and sitekiosk.com are also treated as separate domains.
To avoid surprises, either:
- Add both versions explicitly, or
- Use a wildcard for subdomains (for example, *://*.sitekiosk.com/*) so any subdomain and subdirectory is allowed.

7. Publish the project with the allowed list

After configuring your allowed websites, save the settings.
Click Publish to push the updated project to your test device or kiosk.
Wait until the project status shows as published on the device you’re using.

8. Test behavior and identify blocked URLs

On the kiosk, test a button that points to one of your allowed sites (for example, a button that opens www.weather.com).
If the browser shows a blocked URL message, note that this message displays the actual URL that was blocked.
Often, a link such as www.weather.com will redirect to a slightly different URL (for example, https://weather.com without www), which you must allow explicitly.

9. Use monitoring logs to find blocked addresses

If you don’t have a URL bar enabled and can’t see the address, open the Monitoring section in SiteKiosk Online.
Select the device you are testing with.
Go to Log files.
Look for entries that mention the URL filter rules canceling navigation, and find the exact URL that was blocked (for example, https://weather.com).
Copy that URL exactly, as shown in the log.

10. Add the exact blocked URL to the allowed list

Return to Projects and reopen your project.
Go back to Settings → Browser → Permitted Internet addresses.
Add a new entry with the exact URL you copied from the logs and append a wildcard if you want to allow all pages under it (for example, https://weather.com/*).
Save the changes.
Publish the project again so the updated allowed list is sent to the device.

11. Confirm that the site is now allowed

After publishing, wait for the device to receive the new configuration.
On the kiosk, click the same button again (for example, the weather button).
The page should now load successfully, confirming that the URL is properly included in your allowed websites list.

Using these steps, you can confidently answer: How do I create an allowed websites list in SiteKiosk Online? By blocking all addresses by default, then explicitly adding and testing allowed URLs (with proper wildcards for protocol, subdomains, and subdirectories), you ensure your kiosk only reaches the sites you intend.

FAQ: Allowed Websites List in SiteKiosk Online

Q: How do I create an allowed websites list in SiteKiosk Online?
A: Log into your project, go to Settings → Browser → Permitted/forbidden Internet addresses, block all web addresses by default, then add specific URLs or wildcards for the sites you want to allow.

Q: Why isn’t hiding the URL bar enough for kiosk security?
A: Links from buttons or embedded content can still navigate to external sites like social media; an allowed websites list explicitly whitelists only approved domains to prevent this.

Q: What happens to button links when all websites are blocked?
A: The exact start page URL from each button remains allowed, but other pages, subdirectories, or redirects on the same site will be blocked unless added to the permitted list.

Q: How do I use wildcards in the allowed websites list?
A: Use *:// for protocols (HTTP/HTTPS), *.domain.com for subdomains, and domain.com/* for subdirectories to allow flexible navigation within approved sites.

Q: Why does a button link get blocked even if the domain seems allowed?
A: Redirects often change the URL (e.g., www.weather.com → weather.com), so copy the exact blocked URL from kiosk error messages or device log files and add it with wildcards.

Q: How do I find blocked URLs if the URL bar is disabled?
A: Go to Monitoring → select your device → Log files, and look for entries about canceled navigation due to URL filter rules; this shows the precise address to permit.

Q: Do I need to publish after adding sites to the allowed list?
A: Yes, save your changes, then publish the project so the updated permitted addresses are pushed to the kiosk device.