Verifying domain ownership
How to prove you own a domain to Google, Microsoft, email providers, and other services, usually by adding a TXT record to your DNS.
Many services (Google Workspace, Google Search Console, Microsoft 365, and others) ask you to "verify" that you own your domain before letting you use it. This guide explains what that means and how to do it.
Why services ask you to verify
Anyone can claim to own any domain. Verification is the way a service confirms you actually have control over the DNS settings for a domain, proving you're the legitimate owner.
The most common method is TXT record verification. The service gives you a unique string of text, you add it as a TXT record in your DNS, and the service then checks your DNS to confirm the record is there. Only someone with access to the domain's DNS can add that record, which is what makes it good evidence of ownership. Google puts it bluntly in its own Workspace documentation: "DNS records are the best way to ensure that the owner of a domain is the one who's signing up for Google Workspace. Other verification methods, such as HTML strings or meta tags, can be used by malicious actors to create fraudulent Google Workspace accounts."
Common verification scenarios
| Service | Why it verifies | How |
|---|---|---|
| Google Workspace | To set up email at your domain | TXT record at your registrar |
| Google Search Console | To access your site's search data | TXT record via your domain provider, HTML file, HTML tag, or an existing Analytics or Tag Manager snippet |
| Microsoft 365 | To set up email at your domain | TXT record, or an MX record or a text file on your site if you can't add TXT |
| HubSpot | To connect a domain to HubSpot | CNAME record for a subdomain, A records for a root domain |
| Mailchimp | To authenticate your sending domain | Two CNAME records (DKIM) plus one TXT record (DMARC) |
| Facebook/Meta | To verify a business domain | DNS TXT entry, HTML file upload, or a meta tag |
One Search Console detail worth knowing: the DNS method is the only way to verify a Domain property, which is the property type that covers every subdomain and both http and https. The file and tag methods only work for a single URL prefix.
How to add a TXT verification record
Get the TXT record value from the service. During setup, the service will show you a TXT record with a unique code. It might look like: google-site-verification=abc123xyz456.
Log in to wherever your DNS is managed. This is either your domain registrar (GoDaddy, Namecheap, etc.) or a DNS provider like Cloudflare.
Navigate to DNS management for your domain. Look for a section called "DNS Records," "DNS Zone," or similar.
Add a new TXT record with:
- Name/Host:
@(which represents your root domain), or whatever the service specifies - Type: TXT
- Value: The code provided by the service
- TTL: Leave at the default, or use 3600
Save the record.
Return to the service and click Verify. The service will check your DNS for the record. It's often a matter of minutes, but how long depends on your DNS provider: Microsoft says allow up to 10 minutes and warns that some registrars need up to 48 hours, and Meta says it's normally minutes but can take up to 72. See DNS propagation: why changes take time.
Leave the verification record in place
Once you're verified, leave the TXT record where it is. Services differ on what happens if you remove it (Google Search Console re-checks the token periodically and warns you if it can no longer confirm it, and Meta tells you to leave the record because it "may be checked periodically for verification purposes") so removing it can cost you access. Leaving it does no harm.
Alternative verification methods
Some services offer alternative methods if you can't edit DNS:
- HTML fileUpload a specific file to your website's root directory
- HTML meta tagAdd a specific tag to the
headsection of your homepage - CNAME recordAdd a CNAME record to DNS (some services use this instead of TXT)
- An existing Google snippetSearch Console can verify a site through a Google Analytics or Google Tag Manager snippet that's already on the page
- MX recordMicrosoft 365 accepts one if you can't add a TXT record
We recommend the TXT record method where available. It's the method Google itself calls the best way to prove ownership, and unlike a file or a tag it doesn't disappear when someone redesigns the site.
TXT record
What it proves
That you control the domain's DNS. Only someone with that access can add it.
Search Console
The only way to verify a Domain property, covering every subdomain.
After a redesign
Still in place.
HTML file or meta tag
What it proves
That you can change the website. Google warns these methods can be misused for fraudulent Workspace accounts.
Search Console
Covers a single URL prefix only.
After a redesign
Can disappear.
Common questions
I added the TXT record but verification is failing. What should I do?
Give it time first: the providers themselves quote windows from ten minutes up to two or three days, depending on your DNS host. If it's still failing after that, check that the record value was copied exactly, with no extra spaces or missing characters, and use a DNS lookup tool to confirm the record is actually visible.
Can I have multiple verification TXT records?
Yes. You can have several TXT records on the same name, including verification records from different services, and they don't conflict. The exception is SPF: the standard (RFC 7208) says that if a lookup returns more than one SPF record the check fails outright with a permanent error, so keep it to one SPF record and merge everything into it.
Do I need to do this myself, or can you do it?
We handle domain ownership verification as part of email setup, search console setup, and other services we manage. If you need to do it yourself, the steps above will guide you. Feel free to reach out if you get stuck.
What if I don't have access to my DNS to add the record?
If you don't have access, contact us. We can add the record for you if we have DNS access. If no one has access, see How to find where your domain is registered and Give us access to manage your DNS to get access sorted first.
Related guides
Was this page helpful?
Go deeper on chykalophia.com
Need a hand?
Stuck? We'll help.
Email us with your website address and a screenshot if you can, and we’ll take it from there.
Last updated