Required URLs and ports for OneDrive

This reference article lists every endpoints used by the consumer version of OneDrive. If your organization restricts computers on your network from connecting to the Internet, this article lists the Fully Qualified Domain Names (FQDNs) and ports that you should include in your outbound allow lists to ensure your computers can successfully use the consumer version of OneDrive.

Important

Filtering internet traffic requires advanced networking knowledge and isn't suitable for all customers.

If you are looking for a listing of endpoints used by OneDrive in Office 365, see Office 365 URLs and IP address ranges.

Supported hosts and ports for OneDrive

To use OneDrive, the following endpoints need to be accessible to client computers.

Table 1
Row Destination host Destination Port
1
onedrive.com
*.onedrive.com
onedrive.live.com
login.live.com
spoprod-a.akamaihd.net
*.mesh.com
p.sfx.ms
*.microsoft.com
fabric.io
*.crashlytics.com
vortex.data.microsoft.com
https://posarprodcssservice.accesscontrol.windows.net
redemptionservices.accesscontrol.windows.net
token.cp.microsoft.com/
tokensit.cp.microsoft-tst.com/
*.office.com
*.officeapps.live.com
*.aria.microsoft.com
*.mobileengagement.windows.net
*.branch.io
*.adjust.com
*.servicebus.windows.net
vas.samsungapps.com
odc.officeapps.live.com
login.windows.net
login.microsoftonline.com
TCP 80, TCP 443
2
*.files.1drv.com
*.onedrive.live.com
*.*.onedrive.live.com
storage.live.com
*.storage.live.com
*.*.storage.live.com
*.groups.office.live.com
*.groups.photos.live.com
*.groups.skydrive.live.com
favorites.live.com
oauth.live.com
photos.live.com
skydrive.live.com
api.live.net
apis.live.net
docs.live.net
*.docs.live.net
policies.live.net
*.policies.live.net
settings.live.net
*.settings.live.net
skyapi.live.net
snapi.live.net
*.livefilestore.com
*.*.livefilestore.com
storage.msn.com
*.storage.msn.com
*.*.storage.msn.com
TCP 80, TCP 443