# How do I verify my domain in Applane?

> Add one TXT record at the domain apex with the value applane-verify=<TOKEN> shown in the console, then click Verify. DNS takes minutes to a day.

Source: https://docs.applane.dev/console/verify-domain/

**Who:** Whoever manages your DNS. The Applane admin clicks Verify.  
**Time:** 5 minutes, plus DNS propagation

Before the extension will serve your domain, Applane checks that you control it. Without this, anyone could register your domain and point your employees at a hostile sign-in.

## Add the record

**Setup > Verify your domain** shows the value. Add one TXT record at the apex of the domain your employees sign in with:

```text
Type   TXT
Name   @            (the bare domain, for example acme.com)
Value  applane-verify=<TOKEN>
TTL    300 or your default
```

Add it alongside any TXT records already there (`v=spf1`, `google-site-verification`); do not replace them.

## Verify

Click **Verify** in the console. Applane looks up the TXT records at your domain and passes when one of them matches.

DNS changes take from a minute to a day to show up. The console re-checks each time you click; "No matching record yet" lists the TXT values it did find, so you can tell a propagation delay from a typo.

You can check from a terminal too:

```bash
dig +short TXT <YOUR_DOMAIN>
```

## While you wait

Everything else on the checklist can be done before the domain verifies. Only the first sign-in from the extension depends on it: until then builders see `unknown_domain`. See [Error messages](https://docs.applane.dev/reference/errors/#unknown_domain).

## More than one domain

A trial or self-serve company has one domain. Alias domains (`acme.co.uk` next to `acme.com`) are added on Enterprise; write to support with the list, and each one gets its own TXT record.

## Remove it later

Keep the record as long as you use Applane; it is re-checked. When you [uninstall](https://docs.applane.dev/workspace-admins/uninstall/), delete it.