Blacklist

Open an app and choose Blacklist.

A blacklisted HWID (a PC) or IP address can’t sign in to the app or keep a session open, whichever account or key it uses. Adding an entry ends matching sessions at once.

The blacklist is checked at create account, password sign-in, key sign-in, redeem with credentials, and on every request a signed-in client makes, heartbeats included.

Type	Value
HWID	The 64-character hardware ID shown on the user’s row or in Free users
IP	An IPv4 or IPv6 address

Each entry can have a reason, and the list shows who added it. Adding and removing entries needs Users: All.

Bans from the app itself

Your app can ban its own user and blacklist the PC when it detects tampering, with the SDK’s BanCurrentUser(reason, true). That is limited to 5 per hour per IP. See Tamper response.