In your Messenger settings under General > Keep your Messenger secure you can create a list of trusted domains that the Intercom Messenger can be seen on. Once you set this up, the Intercom Messenger will only appear on these domains (it won’t appear in unintended locations).
Keep your Messenger secure by listing your trusted domains and subdomains, separated by commas.
Important:
If you leave this blank, the Intercom Messenger can be added to any domain.
You can list multiple domains, separated by commas.
To list all subdomains, use wildcarding by adding an asterisk (
*) at the start of your domain as a catch-all. For example,*.intercom.comwill match all subdomains likeapp.intercom.com,help.intercom.com, etc. Note that you can only use one wildcard per domain, and it must be the first character.Ensure you add the full domain name (i.e. 'www.intercom.com', not 'intercom.com').
We don't support adding localhost, but you can add '0.0.0.0' and/or '127.0.0.1' and the Messenger will work on these domains.
If the Messenger still fails to load for signed-in users after you've added the correct domain, check whether your workspace uses Identity Verification (user_hash) or JWT-based Messenger Security. A trusted domain alone won't fix a missing or invalid user_hash — the Messenger will still fail to load for identified users on an otherwise-trusted domain. See Migrating from Identity Verification to Messenger Security with JWTs to confirm your setup.
Need more help? Get support from our Community Forum
Find answers and get help from Intercom Support and Community Experts