Verifying your domain ownership is a crucial security step that proves you control your domain.
It is a prerequisite for enabling features such as Email Domain Authentication and Single Sign-On (SAML SSO), which help secure and streamline access to your organization.
🔑 To verify your domain, you must be able to add or modify DNS records, typically through your domain registrar or DNS hosting provider.
Steps to verify your domain
1. Navigate to access settings
Go to your settings and click Access under the Administration section in the left-hand navigation menu.
Click Access in the administration settings menu
🔑 Only users with the Admin role can initiate and manage domain verification.
2. Initiate domain verification
On the Access settings page, locate the Domain ownership section and click Add domain. A modal opens.
Click Add domain
3. Add DNS TXT record
First initiate domain verification:
Enter your domain in the modal (e.g.,
yourdomain.com) and clickAdd domain.Your new domain will appear as
Pending(verification in progress).
You should now add a DNS TXT record to your domain:
Click
Instructionsand copy the your domain’s unique DNS TXT record.Log in to your domain registrar or DNS provider.
Navigate to DNS management.
Add a new TXT record with:
Type:
TXTHost/Name:
@or your domain (depends on provider).Value/Data: Paste the verification code (e.g.,
mistral-domain-verification=xxxxxx).
Save the record.
Click Instructions to see the TXT record value then configure it in your DNS provider
📌 You can check propagation with nslookup -type=TXT yourdomain.com in a terminal or command prompt. Look for the mistral-domain-verification= value.
4. Wait for DNS propagation
The status will remain Pending until the TXT record is detected.
Propagation usually takes 10 minutes to 24 hours, but may take longer depending on your DNS provider and TTL.
If verification is still pending after 24–48 hours or you receive an error message, double-check the record and repeat the process. If the issue persists, contact support ✉️.
🚨 Keep the DNS TXT record active. Removing it can break features that depend on verification, such as Email Domain Authentication or SSO.
5. Verification confirmation
The platform will periodically check for the record. Once detected, the domain status changes to Verified.
Access page showing a verified domain
Next steps
Now that your domain is verified, let’s configure Email Domain Authentication or SAML SSO to control how new users can join your organization.
🧑🔧 I’m an administrator and I want to enable Email Domain Authentication.
🧑🔧 I’m an administrator and I want to enable SAML SSO.