# Allow your form to be embedded only on your own sites

You can limit where your form appears by listing your sites in **Allowed embed domains**.

1. Open your form, click **Settings**, then go to **Access**.
2. Find **Allowed embed domains** and enter one site address per line. Each entry must start with `https://`, such as `https://example.com`.
3. Click **Save Changes**. Your listed sites can keep showing the embedded form. Browsers block other sites.

You can list up to 10 sites per form on any plan, and you must use the full site address without a path, query, or fragment. Wildcards such as `*.example.com` aren't supported.

For example, `https://example.com` and `https://www.example.com` count as different sites. If you use both, add both.

If your entry is in the wrong format, Makeform shows an error under the box and doesn't save your list. Check that each entry starts with `https://` and has no path, then save again.

Once you set a list, anyone who opens the form's direct link will see a notice instead of the form. You can't embed your form's custom-domain page, even if you add that domain to the list.

To remove the restriction, clear the box and click **Save Changes**. An empty list allows you to embed the form on any site.

This setting controls which sites can show your embedded form. It isn't a guarantee against submissions sent by a determined script, so keep your CAPTCHA or spam settings in place.