The cloud.microsoft domain

This page's changes and edits · All guidance changes

Microsoft's edit · 7 Apr 2025 16:18 UTC

Update cloud-microsoft-domain.md

Microsoft's commit message in MicrosoftDocs/microsoft-365-docs · commit 720dfe3 · +6 ~~−31~~ lines · also on GitHub

⋯ 3 unchanged lines

44 ms.author: kvice

55 author: kelleyvice-msft

66 manager: scotv

7 −ms.date: 01/13/2025

7 +ms.date: 04/07/2025

88 ms.topic: overview

99 ms.service: microsoft-365-enterprise

1010 ms.subservice: network

⋯ 16 unchanged lines

2727

2828 The `.microsoft` top-level domain is exclusive to Microsoft. The new domain doesn’t have traditional suffixes such as `.com` or `.net` in the end. This is by design. `cloud.microsoft` resides under the `.microsoft` top-level domain, for which Microsoft is a registry operator and the sole registrant. This domain allows for extra security, privacy, and protection against spoofing when you interact with apps within that domain. You can trust that any website or app that ends with `cloud.microsoft` is an official Microsoft product or service.

2929

30 +Some Microsoft 365 products that use the `cloud.microsoft` domain include Microsoft 365, Microsoft 365 Copilot Chat, Microsoft Word, Microsoft Excel, Microsoft PowerPoint, Microsoft Outlook, Microsoft OneNote, Microsoft Planner, Microsoft Loop, Microsoft Mesh, Microsoft Viva Engage, Microsoft Viva Insights, Microsoft Viva Learning, Microsoft Viva Pulse, and more. This isn't a complete list.

31 +

3032 ## Benefits of a unified domain

3133

3234 Consolidating authenticated user-facing Microsoft 365 experiences to a single domain benefits customer in several ways. For end users, it streamlines the overall experience by reducing sign-ins, redirects, and delays when navigating across apps. For admins, it reduces the complexity of allowlists that are required to connect to Microsoft 365 services and help your organization stay secure and productive. For all our customers – and our developers – this change helps align for better and tighter integration across the Microsoft 365 ecosystem by streamlining development and improving performance of cross-app experiences.

⋯ 2 unchanged lines

3537

3638 ## Security considerations

3739

38 −To ensure that customers and users can treat everything under the *.cloud.microsoft domain as fully trusted, the entire domain hierarchy is isolated, purpose built, and dedicated to hosting only secure and compliant Microsoft product experiences. The domain is managed to the highest standards of domain security and reputation, and is kept free of scenarios such as third-party websites, IaaS/PaaS resources (such as file and blob storage), and hosting of active content, code or scripts that may affect the trust and integrity of products and applications residing in the domain.

40 +To ensure that customers and users can treat everything under the `*.cloud.microsoft` domain as fully trusted, the entire domain hierarchy is isolated, purpose built, and dedicated to hosting only secure and compliant Microsoft product experiences. The domain is managed to the highest standards of domain security and reputation, and is kept free of scenarios such as third-party websites, IaaS/PaaS resources (such as file and blob storage), and hosting of active content, code, or scripts that might affect the trust and integrity of products and applications residing in the domain.

3941

40 −The `.microsoft` gTLD is on the HTTP Strict-Transport-Security preload list in all popular browsers, meaning that all non-secure HTTP requests are automatically upgraded to use HTTPS, and users are blocked from overriding certificate errors that could indicate an active network attacker is attempting to compromise the security of the connection. All *.cloud.microsoft subdomains inherit this protection.

42 +The `.microsoft` gTLD (Generic Top-Level Domain) is on the HTTP Strict-Transport-Security preload list in all popular browsers, meaning that all nonsecure HTTP requests are automatically upgraded to use HTTPS, and users are blocked from overriding certificate errors that could indicate an active network attacker is attempting to compromise the security of the connection. All `*.cloud.microsoft` subdomains inherit this protection.

4143

4244 ## Requirements for admins

4345

44 −Since 2023, *.cloud.microsoft and other domains related to the domain unification initiative are part of the [Microsoft 365 network guidance on domains and service endpoints](/microsoft-365/enterprise/urls-and-ip-address-ranges). Customers who use the Microsoft 365 web service API to automate network settings have been getting the network settings since then. Customers who manually update endpoints should ensure that *.cloud.microsoft and other required domains are included in their allow-list to prevent connectivity and service incidents for their users.

45 −

46 −## Microsoft product and service URLs

47 −| Service | URL |

48 −|:-----|:-----|

49 −|Microsoft 365 |[m365.cloud.microsoft](https://m365.cloud.microsoft)|

50 −|Microsoft 365 Copilot Chat |[m365.cloud.microsoft/chat](https://m365.cloud.microsoft/chat)|

51 −|Microsoft Excel | [excel.cloud.microsoft](https://excel.cloud.microsoft)|

52 −|Microsoft PowerPoint | [powerpoint.cloud.microsoft](https://powerpoint.cloud.microsoft)|

53 −|Microsoft Word | [word.cloud.microsoft](https://word.cloud.microsoft)|

54 −|Microsoft Outlook | [outlook.cloud.microsoft](https://outlook.cloud.microsoft)|

55 −|Microsoft 365 Service Health Status Page |[status.cloud.microsoft](https://status.cloud.microsoft)|

56 −|Microsoft Admin Center| [admin.cloud.microsoft](https://admin.cloud.microsoft)|

57 −|Microsoft Loop | [loop.cloud.microsoft](https://loop.cloud.microsoft)|

58 −|Microsoft Mesh | [mesh.cloud.microsoft](https://mesh.cloud.microsoft)|

59 −|Microsoft OneNote | [onenote.cloud.microsoft](https://onenote.cloud.microsoft)|

60 −|Microsoft Places | [places.cloud.microsoft](https://places.cloud.microsoft)|

61 −|Microsoft Planner | [planner.cloud.microsoft](https://planner.cloud.microsoft)|

62 −|Microsoft Setup | [setup.cloud.microsoft](https://setup.cloud.microsoft)|

63 −|Microsoft Sway | [sway.cloud.microsoft](https://sway.cloud.microsoft)|

64 −|Microsoft Viva Engage | [engage.cloud.microsoft](https://engage.cloud.microsoft)|

65 −|Microsoft Viva Goals | [goals.cloud.microsoft](https://goals.cloud.microsoft)|

66 −|Microsoft Viva Home | [viva.cloud.microsoft](https://viva.cloud.microsoft)|

67 −|Microsoft Viva Insights | [insights.cloud.microsoft](https://insights.cloud.microsoft)|

68 −|Microsoft Viva Learning | [learning.cloud.microsoft](https://learning.cloud.microsoft)|

69 −|Microsoft Viva Pulse | [pulse.cloud.microsoft](https://pulse.cloud.microsoft)|

70 −

71 −The above list provides examples of individual URLs for applications that users can use through the web browser. It does not represent the full set of endpoints required for functionality of these applications and should not be used to granularly control access through network allow-lists and other network settings. To configure network settings, customers should follow Microsoft official network guidance.

46 +Since 2023, `*.cloud.microsoft` and other domains related to the domain unification initiative are part of the [Microsoft 365 network guidance on domains and service endpoints](/microsoft-365/enterprise/urls-and-ip-address-ranges). Customers who use the Microsoft 365 web service API to automate network settings have been getting the network settings since then. Customers who manually update endpoints should ensure that `*.cloud.microsoft` and other required domains are included in their allowlist to prevent connectivity and service incidents for their users.

7247

7348 ## See also

7449

⋯ 2 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/microsoft-365-docs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 05:18 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.