Verify a domain and check its email DNS

Before you change DNS

You need permission to manage the domain and access to its authoritative DNS provider. Use the exact hostname you want to check, without a URL scheme, path or email address. Varde's domain check is separate from the recipient-domain approval used for invitations.

Publish the displayed TXT record

1. Open Domains in Varde and add the hostname. Copy the record name and unique verification value displayed for that domain.
2. Open the DNS provider for the correct zone and add a TXT record. In Cloudflare, use DNS → Records → Add record, choose TXT and enter the displayed name and content.
3. Check how your provider handles the zone suffix: some panels append it automatically. Use the exact full hostname Varde displays as the final result, without duplicating the domain.
4. Paste the verification value without added backticks, quotation characters or spaces. Save the record with the provider's normal TTL. Do not replace existing SPF, DMARC, MX or other verification records.

Verify and run the check

1. Allow the DNS change to become publicly visible, then return to Domains and choose Verify ownership.
2. If verification succeeds, run the domain check. Ownership is checked again before retrieving the domain observations.
3. Read the SPF, DMARC and MX results with the date of the check. Keep the ownership record available while using the feature.

Read the results in context

SPF describes permitted sending sources, DMARC describes a policy and reporting configuration, and MX identifies receiving mail servers. Varde retrieves DNS records; their presence does not establish that every sender is correctly configured or that a message will be delivered.

This is a manual DNS observation, not a penetration test or a certificate that the domain is secure. Continuous monitoring, incident alerts and automatic DKIM selector discovery are not included. Have your mail administrator review proposed mail-policy changes before publishing them.

If verification fails

• Confirm the DNS zone is authoritative for the hostname; editing an unused provider will not publish the record.
• Check the final record name, the complete verification value and unwanted literal backticks or quotes.
• Allow for DNS caching, then retry. A DNS service error is different from a confirmed missing record.
• Give support the hostname, time and visible error. The ownership TXT value is public; DNS account credentials are not needed in a support message.