# Add a PIN List

A PIN (Personal Identification Number) list is a named collection of passcodes you can attach to an outbound route. Once a route is protected this way, anyone dialing an external number through it is prompted for a code and the call only proceeds if the code matches one in the list. Use PIN lists to control who can place certain outbound calls and to keep your calling costs and security in check.

## Create the PIN list

1. Sign in to the web portal and go to **Call Features > PIN List**, then click **Add**.
2. In the dialog that opens, fill in the following fields:
   - **Name**: A label that identifies this list.
   - **PIN List**: Type the passcodes for the list. Enter each code and press **Enter** to add it before typing the next one.

     :::note
     - PIN codes can contain digits only.
     - Each code must be between 3 and 15 characters long.
     :::
   - **Record in CDR**: Choose whether a used PIN code is written to the call detail record (CDR), the log entry the system keeps for every call.

     :::caution
     Turning this on stores the code that was used inside the call record. That helps with auditing, because you can see which code placed a call, but it also means the code is visible to anyone who can read your call logs. Leave it off if the codes need to stay secret.
     :::
3. Click **Save**.

## What to do next

:::note
Saving the list does not restrict anything on its own. Callers are only challenged for a code once you attach the list to an outbound route in the second step below.
:::

1. Hand out the codes from this list to the people who should be allowed to call through the protected route. Giving each person their own unique code makes call records easier to trace back to an individual.
2. [Apply the PIN list to an outbound route](/pbx/administrator-guide/restrict-outbound-calls-by-pin-codes/) so callers are challenged for a code before the call goes through.