verifying-or-approving-a-domain-for-your-organization.md

title	intro	redirect_from	permissions	versions	type	topics	shortTitle
Verifying or approving a domain for your organization	You can verify your ownership of domains with {% data variables.product.company_short %} to confirm your organization's identity.{% ifversion ghec or ghes %} You can also approve domains that {% data variables.product.company_short %} can send email notifications to for members of your organization.{% endif %}	/articles/verifying-your-organization-s-domain /articles/verifying-your-organizations-domain /github/setting-up-and-managing-organizations-and-teams/verifying-your-organizations-domain /organizations/managing-organization-settings/verifying-your-organizations-domain	Organization owners can verify or approve a domain for an organization.	fpt ghes ghec * * *	how_to	Enterprise Notifications Organizations Policy	Verify or approve a domain

About domain verification

After verifying ownership of your organization's domains, a "Verified" badge will display on the organization's profile. {% ifversion ghec %}If your organization has agreed to the {% data variables.product.company_short %} Customer Agreement, organization owners will be able to verify the identity of organization members by viewing each member's email address within the verified domain. For more information, see AUTOTITLE and AUTOTITLE.{% endif %}

{% ifversion ghec or ghes %} {% ifversion ghec %}If your organization is owned by an enterprise account, a{% else %}A{% endif %} "Verified" badge will display on your organization's profile for any domains verified for the enterprise account, in addition to any domains verified for the organization. Organization owners can view any domains that an enterprise owner has verified or approved, and edit the domains if the organization owner is also an enterprise owner. For more information, see AUTOTITLE. {% endif %}

{% data reusables.organizations.verified-domains-details %}

{% ifversion ghec or ghes %} After verifying ownership of your organization's domain, you can restrict email notifications for the organization to that domain. For more information, see AUTOTITLE. {% endif %}

{% ifversion ghec %}

Note

To restrict email notifications to a verified domain, your organization must use {% data variables.product.prodname_ghe_cloud %}. {% data reusables.enterprise.link-to-ghec-trial %}

{% endif %}

{% ifversion ghec %}You can also verify custom domains used for {% data variables.product.prodname_pages %} to prevent domain takeovers when a custom domain remains configured but your {% data variables.product.prodname_pages %} site is either disabled or no longer uses the domain. For more information, see AUTOTITLE.{% endif %}

If you confirm your organization’s identity by verifying your domain and restricting email notifications to only verified email domains, you can help prevent sensitive information from being exposed. For more information see AUTOTITLE.

{% ifversion ghec or ghes %}

About domain approval

{% data reusables.enterprise-accounts.approved-domains-beta-note %}

{% data reusables.enterprise-accounts.approved-domains-about %}

After you approve domains for your organization, you can restrict email notifications for activity within the organization to users with verified email addresses within verified or approved domains. For more information, see AUTOTITLE.

Enterprise owners cannot see which organization members or email addresses receive notifications within approved domains.

Enterprise owners can also approve additional domains for organizations owned by the enterprise. {% ifversion ghec %}For more information, see AUTOTITLE.{% endif %}{% ifversion ghes %}For more information, see AUTOTITLE.{% endif %} {% endif %}

Verifying a domain for your organization

To verify a domain, you must have access to modify domain records with your domain hosting service.

{% data reusables.profile.access_org %} {% data reusables.profile.org_settings %} {% data reusables.organizations.verified-domains %} {% data reusables.organizations.add-a-domain %} {% data reusables.organizations.add-domain %} {% data reusables.organizations.add-dns-txt-record %}

1. Wait for your DNS configuration to change, which may take up to 72 hours. You can confirm your DNS configuration has changed by running the dig command on the command line, replacing TXT-RECORD-NAME with the name of the TXT record created in your DNS configuration. You should see your new TXT record listed in the command output.

   dig TXT-RECORD-NAME +nostats +nocomments +nocmd TXT

2. After confirming your TXT record is added to your DNS, follow steps one through three above to navigate to your organization's approved and verified domains. {% data reusables.organizations.continue-verifying-domain %}

Approving a domain for your organization

{% data reusables.enterprise-accounts.approved-domains-beta-note %}

{% data reusables.profile.access_org %} {% data reusables.profile.org_settings %} {% data reusables.organizations.verified-domains %} {% data reusables.organizations.add-a-domain %} {% data reusables.organizations.add-domain %} {% data reusables.organizations.domains-approve-it-instead %} {% data reusables.organizations.domains-approve-domain %}

Removing an approved or verified domain

{% data reusables.profile.access_org %} {% data reusables.profile.org_settings %} {% data reusables.organizations.verified-domains %}

1. To the right of the domain to remove, select the {% octicon "kebab-horizontal" aria-label="Show more options" %} dropdown menu, then click Delete.