Skip to main content

Verification and Monitoring

Verification confirms that you control the domain and that the authentication records are in place. The Monitoring Report then gives you an ongoing health check for the domain.

Verifying the domain​

  1. In the Console, create your email domain and add the DNS records it provides. See DNS Records.
  2. Wait for DNS to propagate. Changes may take 24 to 72 hours to propagate globally, though many appear within a few hours.
  3. Open the domain in the Console and check the DNS Records panel. Use Refresh to recheck the latest DNS state.

The panel shows an Email Verification Status with one of these values:

  • Pending: the verification record has not been detected yet.
  • Success: the domain is verified.
  • Not Verified: the record was not found or did not match.

DKIM verification​

After you click Enable DKIM and add the DKIM CNAME records, the Console checks that they resolve. The Monitoring Report reports DKIM signing as Enabled or Disabled, DKIM verification status, and whether the DKIM DNS records are Published or Missing.

Verification timeout​

Verification Needed

Older guidance stated that verification records expire if a domain is not verified within 7 days. This timeout is not enforced by the Console itself and may depend on the email provider. Confirm the current behavior with the Help Center. If verification has not completed, contact the Help Center to regenerate the records, then re-add the new records from the Console.

The Monitoring Report​

Open a domain in the Console and click Monitoring Report (also available as View Report) to run live diagnostics. Add addresses to the Monitoring Reports field on the domain to receive daily and weekly versions by email.

For an email domain, the report covers:

  • SPF Report: whether an SPF record is detected, whether it validates, and any SPF issues found.
  • DMARC Report: whether a DMARC record is detected, whether it validates, and any DMARC issues found.
  • DKIM Report: DKIM signing status, DKIM verification status, whether the DKIM DNS records are published, and any DKIM issues, with the expected and resolved CNAME values.
  • SPF Lookup Analysis: whether the SPF record resolves in DNS, the DNS lookup count against the limit of 10, and the all mechanism in use (for example, ~all soft fail or -all hard fail).
  • MX Report: whether MX records are detected, whether each resolves, and any MX issues.
  • Domain Reputation: a risk score, category flags, security checks, and blacklist results.

See also​