How do I verify my email subdomain?

• "I Created My Records, but Mailgun Does Not See Them"

Always double-check any changes made to your DNS configuration through both local and public queries. Local queries can be performed using utilities like dig (Linux/Unix) and nslookup (Windows).

To verify through a dig command, use the syntax: dig -t TYPE DOMAIN

To verify through nslookup, use the syntax: nslookup -q=TYPE DOMAIN

Local DNS servers in your network might take precedence over public queries, so even if you don't have a local DNS server, it's recommended to perform a secondary public query for your domain. You can use tools like "What's My DNS" to check the propagation of your changes across multiple global servers.

• "The DKIM Record Is Verified, but the SPF Is Not"

To verify your domain, you need two TXT records: SPF and DKIM. If your DKIM record is in order but not the SPF, consider these aspects:

• There can only be one SPF record per hostname. If your hostname contains multiple SPF records, they should be merged into a single value.

  The new value should be structured like this: v=spf1 ip4:1.2.3.4 include:smtp.domain.tld include:mailgun.org ~all. Make sure your SPF record doesn't exceed 10 lookups to avoid issues.

• If your hostname has a CNAME in addition to other record types (e.g., TXT, A), the CNAME will take precedence over other records. You can resolve this by removing the CNAME from the hostname or using a different sending subdomain.

• "The Records Are Resolving, but Mailgun Still Says the Domain Is Unverified"

Depending on the DNS hosting provider, records can take up to 24-48 hours to fully propagate. A manual verification can be attempted if 24 hours have already passed and the records are confirmed correct via both local and public queries. 

To perform a manual verification and update the DNS records cache, log into your Mailgun control panel. If you're using our classic UI (options across the top, with a silver background) you can follow these instructions: 

• Click Domains 
• Select your domain's name 
• Under Domain Verification & DNS select Check DNS Records Now.

If you're using our beta UI (options displayed down the left-hand side on a dark column): 

• Click Messages.
• Select your specific domain.
• Click Settings. 
• Select DNS Records. 
• Click the green Check DNS Records Now button.

Other DNS Records - Optional

While the two TXT records (SPF and DKIM) are all that's required to send messages via Mailgun, you do also have the option to add MX and CNAMErecords, if you choose. The process for adding these optional records is exactly the same as adding the required TXT records.

MX records are really only needed if you're looking to receive incoming mail for the exact domain or domains you have verified in your Mailgun account; keep in mind - you don't want to point your domain's MX records to Mailgun if you already have incoming mail setup elsewhere. If you do, adding Mailgun MX records will break this configuration, and you won't receive your mail as you have previously. 

Note: You only ever want to have one source specified for your MX records, otherwise servers get confused. Bad things happen when servers get confused.

A CNAME record is needed only if you're looking to enable our tracking features, keeping detailed records of Clicks, Opens, and/or Unsubscribes. 

If you are still experiencing any issues after the domain's DNS records are publicly resolving, just reach out to our Support team via the Support tab in your Mailgun control panel!