Skip to main content

How verification works

Sending email from your own domain requires proving ownership and authenticating your mail. Onchain Suite provisions your domain and gives you five DNS records to add at your DNS provider: A domain is send-ready when Ownership, SPF, and both DKIM records verify. Ownership alone is not enough.

The flow

  1. RegisterPOST /domain with your domain. The response includes the complete dns record set immediately, so you can add everything in one DNS session.
  2. Add the records at your DNS provider.
  3. VerifyPOST /domain/{id}/verify, or watch GET /domain/{id}/dns update live as records propagate.
  4. Done — on completion your noreply@yourdomain sender is created automatically and campaigns can send from your domain.

Live status for every record

GET /domain/{id}/dns returns each record with its live verification state:

Conflict detection — when a record “won’t verify”

Most stuck verifications aren’t missing records — they’re clashes with records that already exist. Onchain Suite checks your live DNS and tells you exactly what to change:
  • Two SPF records — multiple v=spf1 records make SPF fail entirely. We compute the exact merged record to publish, tell you which record to keep and edit, and name the specific record(s) to delete — everything else in your DNS is left alone.
  • Existing SPF without our include — never add a second SPF record; we return the merged value to edit into your existing one.
  • DKIM name occupied — a previous email provider’s CNAME (edit it to our value) or an old TXT key squatting the selector name (delete only that TXT, then add the CNAME).
  • Existing DMARC — informational only; your existing policy is fine.
Every fix is surgical: instructions quote the exact record values to edit or delete, so you never risk removing unrelated records (site verifications, other providers’ tokens).

Tips

  • Your registrar may show the host as selector1._domainkey or selector1._domainkey.yourdomain.com — both are the same record.
  • SPF and Ownership both live at @ (the domain root) as TXT records — they coexist fine; only a second v=spf1 record is a problem.
  • DNS changes usually propagate in minutes but can take up to an hour depending on your provider’s TTL.