Skip to main content

​
How verification works

Sending email from your own domain means authenticating your mail with DNS records so mailbox providers trust it. Register the domain and Onchain Suite returns the exact record set to add at your DNS provider. A domain is send-ready once its three DKIM CNAME records verify. The mail-from and DMARC records aren’t required to send, but they improve deliverability and are worth adding in the same session.
The exact record values are unique to your domain and are returned in the API response. Add them verbatim rather than copying values from this page.

​
The flow

1

Register your domain

Add your sending domain in the dashboard (or POST /domain over the API). You immediately get the full set of DNS records to add, so you can do them all in one sitting.
2

Add the records at your DNS provider

Copy each record exactly as shown into your domain’s DNS settings.
3

Verify

Trigger a check. The status of each record updates live as it propagates.
4

Done

Once the three DKIM records verify, your domain is send-ready and your campaigns can send from it. A noreply@yourdomain sender is available to send from by default.

​
Live status for every record

The verification view shows every record with its live state, verified, not started, or failed, and a top-line “send-ready” flag that flips to true once the three DKIM records pass. When a record won’t verify because something already sits at that name, it tells you exactly what to change, quoting the current value and the value to set it to.

​
Conflict detection: when a record won’t verify

Most stuck verifications aren’t missing records. They’re clashes with records that already exist. Onchain Suite checks your live DNS and tells you exactly what to change:
  • A DKIM host is occupied. A previous email provider’s CNAME sits at the selector, so edit it to the value shown. An old TXT key squatting the same name should be deleted, then the CNAME added.
  • An existing mail-from record. If the bounce subdomain already carries an MX or TXT, the response names exactly what to change.
  • An existing DMARC record. Informational only. Your existing policy is fine.
Every fix is surgical: instructions quote the exact record to edit or delete, so you never risk removing unrelated records such as site verifications or another provider’s tokens.

​
Tips

  • Your registrar may show the host as <token>._domainkey or <token>._domainkey.yourdomain.com. Both are the same record.
  • DKIM is three CNAME records, not one. All three must resolve for the domain to be send-ready.
  • DNS changes usually propagate in minutes but can take up to an hour depending on your provider’s TTL.