Domain Whitelisting for Facebook and Instagram Bots in BotSailor

📘 Introduction

To successfully use the Messenger or Instagram Chat widgets (m.me links, engagement plugins, etc.) on your website, your domain must be whitelisted.

This process ensures secure communication and proper display of embedded bot functionalities across platforms. BotSailor makes it easy to whitelist domains for both Facebook and Instagram bots under a unified interface.

🧭 Step-by-Step Guide

🔹 Step 1: Select Your Bot Account

Navigate to Facebook Bot Manager or Instagram Bot Manager from the BotSailor dashboard and select the desired page/bot account (e.g., La Zonè).

🔹 Step 2: Open Domain Whitelisting Section

From the left-hand menu, scroll down and click on Domain Whitelisting.

🔹 Step 3: Add a New Domain

• Click the New Domain button from the top-right.
• A modal will appear prompting you to enter a domain.
• Paste the domain (must start with https://) — e.g., https://chatbotzzz.com/
• Click Save to whitelist the domain.

✅ Tip: Ensure the domain is SSL-enabled (HTTPS only). HTTP domains will not be accepted by Facebook or Instagram.

🔹 Step 4: View Whitelisted Domains

After saving, the newly added domain will appear in your domain list with a timestamp. You can manage or delete domains later if needed.

✅ Use Cases

Whitelisting domains is required for various practical use cases, including:

1. Messenger or Instagram Chat Widgets on Website
   
   

• Add chat buttons that open a conversation with your bot.

1. Landing Page Integration
   
   

• Launch bot flows automatically when a user clicks a CTA on your page.

1. Product Page Assistance
   
   

• Enable Messenger or Instagram bots to help users while browsing products.

1. Popup Campaigns & Lead Generation
   
   

• Use Facebook or Instagram widgets in popups or banners.

1. Automated FAQ Bots
   
   

• Embed Messenger or Instagram bots on Help Center or Blog pages.

FAQ

Why do I need to whitelist a domain?
Facebook and Instagram only allow bots/widgets to load on pre-approved, secure domains to prevent misuse.

Can I use HTTP instead of HTTPS?
No. Only HTTPS domains are accepted by both Facebook and Instagram.

Can I whitelist subdomains?
Yes, but each subdomain (e.g., shop.example.com) must be added separately.

Can I remove or edit a whitelisted domain?
Yes, you can view and delete existing domains from the Domain List section.

🏁 Conclusion

Domain whitelisting is a required and essential step for enabling your Facebook and Instagram bots to interact seamlessly with users via your website. Whether you're embedding Messenger buttons, Instagram CTAs, or full chatbot flows, BotSailor simplifies the domain management process through a clean, unified interface.

Make sure to whitelist every domain (or subdomain) where you plan to deploy engagement tools — and always use HTTPS.