What is a whitelist?

Imagine an event where the people whose names are on the list at the door get in first. That’s roughly how a whitelist works; you’ll also come across it as an allowlist. In NFTs and Web3, instead of your name, the list usually contains your wallet’s public address.

A team may open applications, hold a raffle or select members based on specific participation criteria. The approved addresses then get access on the terms the team has set. The check may be done by the website or by a smart contract, the program that enforces the rules on the blockchain.

For example, an NFT collection may initially allow only allowlisted addresses to create an NFT through minting, before opening the process to everyone. Each address may have a specific limit and time window. In other cases, the list is for taking part in a token sale or for access to a test app.

Why it matters

A whitelist gives a team a way to control who takes part and when. It can reduce congestion during the initial launch and give priority to members of a community. On its own, however, it doesn’t keep out bots or stop the same person from using many wallets.

For you, what matters is what exactly a spot on the list secures. It may only offer the right to participate, not a reserved NFT or a specific amount of tokens. Nor does it necessarily mean a free mint: payment and network fees may be required. We always separate access from a guaranteed allocation, because they are not the same thing.

What to watch out for

Fake “you’ve won a whitelist spot” messages are a common phishing lure. Check the website address against the project’s official channels and check what your wallet is asking you to approve. A signature isn’t automatically harmless just because it doesn’t show a fee.

To register a public address, you don’t need to reveal your seed phrase or private key. And being on a list doesn’t vouch for the team’s trustworthiness, the contract’s security or the future value of the NFT or token.