Required URLs and ports for OneDrive

This reference article lists all endpoints used by the consumer version of Microsoft OneDrive. If your organization restricts computers on your network from connecting to the Internet, this article lists the Fully Qualified Domain Names (FQDNs) and ports that you should include in your outbound allowlists to ensure your computers can successfully use the consumer version of OneDrive.

Important

Filtering internet traffic requires advanced networking knowledge and isn't suitable for all customers.

If you are looking for a listing of endpoints used by OneDrive in Microsoft 365, see Microsoft 365 URLs and IP address ranges.

Supported hosts and ports for OneDrive

To use OneDrive, the following endpoints need to be accessible to client computers.

Row Destination host Destination Port
1
onedrive.com
*.onedrive.com
onedrive.live.com
login.live.com
g.live.com
spoprod-a.akamaihd.net
*.mesh.com
p.sfx.ms
oneclient.sfx.ms
*.microsoft.com
fabric.io
*.crashlytics.com
vortex.data.microsoft.com
posarprodcssservice.accesscontrol.windows.net
redemptionservices.accesscontrol.windows.net
token.cp.microsoft.com/
tokensit.cp.microsoft-tst.com/
*.office.com
*.officeapps.live.com
*.aria.microsoft.com
*.mobileengagement.windows.net
*.branch.io
*.adjust.com
*.servicebus.windows.net
vas.samsungapps.com
odc.officeapps.live.com
login.windows.net
login.microsoftonline.com
TCP 80, TCP 443
2
*.files.1drv.com
*.onedrive.live.com
*.*.onedrive.live.com
storage.live.com
*.storage.live.com
*.*.storage.live.com
*.groups.office.live.com
*.groups.photos.live.com
*.groups.skydrive.live.com
favorites.live.com
oauth.live.com
photos.live.com
skydrive.live.com
api.live.net
apis.live.net
docs.live.net
*.docs.live.net
policies.live.net
*.policies.live.net
settings.live.net
*.settings.live.net
skyapi.live.net
snapi.live.net
*.livefilestore.com
*.*.livefilestore.com
storage.msn.com
*.storage.msn.com
*.*.storage.msn.com
TCP 80, TCP 443