--- schema_version: "1" id: 864952165be64fd74abb9b1168d7a63eba258331d69cad00e0d15d0b3202aaa5 title: Maintain Your Custom Domain collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/platform/264-0-0/domain_mgmt_maintain.md canonical_url: https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_maintain.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 1db9f6fd283a2b1035a4f5e379a87ea44857f1eb9616e30f0ac4be18aa00e0e1 description: To keep your custom domain running smoothly, follow these guidelines. If you serve your domain with your HTTPS certificate, update the certificate before it expires. Optimize your domain that uses the Salesforce content delivery network (CDN). Minimize downtime when you update your domain, and take steps to help prevent domain takeover attacks. And review recommendations for communicating to your users when you change your domain. products: - Salesforce Platform - Security release: "264" --- # Maintain Your Custom Domain To keep your custom domain running smoothly, follow these guidelines. If you serve your domain with your HTTPS certificate, update the certificate before it expires. Optimize your domain that uses the Salesforce content delivery network (CDN). Minimize downtime when you update your domain, and take steps to help prevent domain takeover attacks. And review recommendations for communicating to your users when you change your domain. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: Enterprise, Performance, and Unlimited Editions.
Applies to: Salesforce Sites and LWR, Aura, and Visualforce sites
## Update an Expiring Certificate If Salesforce serves your custom domain with your HTTPS certificate, avoid disruption by renewing or replacing your certificate before it expires. Admins receive an expiring certificate notification email before the certificate expires. See [Update an Expiring Certificate for Your Custom Domain](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_cert_update.htm&release=264.0.0&type=5 "If you serve your domain with your HTTPS certificate on Salesforce servers, avoid disruption to your domain by renewing or replacing your certificate before it expires. You can find the expiration date for your HTTPS certificates on the Certificate and Key Management Setup page. Also, admins receive an expiring certificate notification email before the certificate expires."). ## Optimize the Salesforce CDN When your custom domain serves your Experience Cloud site with the Salesforce CDN, each byte of traffic that’s requested on your custom domain counts toward your CDN usage amount. To learn how to monitor your Salesforce CDN usage and what happens if you exceed the terabyte limit, see [Traffic Allowances for the Salesforce CDN](https://help.salesforce.com/s/articleView?id=platform.community_builder_cdn_usage_limits.htm&release=264.0.0&type=5 "Each byte of traffic that’s requested, whether it’s an image or a complex report, counts toward your content delivery network’s (CDN) usage amount. The amount of traffic allowed over a CDN depends on the license that you purchase. Understand how to monitor your Salesforce CDN usage and what happens if you exceed the terabyte limit."). To improve the performance of your LWR Experience Cloud site that’s served on the Salesforce CDN, cache Apex methods on the Salesforce CDN. ## Change the Domain Configuration Option for Your Domain Change the method for serving your domain. Switch from using a third-party service to serving your domain with the Salesforce CDN, or change the third party that serves your domain. See [Change the Domain Configuration Option for Your Custom Domain](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_change_service.htm&release=264.0.0&type=5 "Change the method for serving your domain. For example, switch from a third-party service or content delivery network (CDN) to the Salesforce CDN. Update your domain in Salesforce to use a different third-party service or CDN to serve your site. Or update a temporary non-HTTPS domain to use HTTPS as required by Salesforce."). ## Help Prevent Domain Takeovers A domain takeover occurs when a malicious actor controls someone else’s domain. They then point the domain to a site that performs malicious activity. When a malicious attacker takes over your domain, your users’ trust in your company makes them more susceptible to the attack, and the resulting impact on your users can damage your brand. A common reason for a domain takeover is a DNS record that points to a resource that’s no longer available. Such DNS records are also known as dangling DNS entries. To help prevent these attacks, if you change your domain name, review and update the DNS record for the old domain. In Salesforce, a domain takeover can also occur when you use a third-party service or CDN to serve your domain, and then you change to another service or domain name. If you no longer have control over the DNS or service for the previous external host name, update your domain in Salesforce. - If you removed your custom domain from the third-party service or CDN, update the external hostname field for your domain to the new service or [change the domain configuration option](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_change_service.htm&release=264.0.0&type=5 "Change the method for serving your domain. For example, switch from a third-party service or content delivery network (CDN) to the Salesforce CDN. Update your domain in Salesforce to use a different third-party service or CDN to serve your site. Or update a temporary non-HTTPS domain to use HTTPS as required by Salesforce.") for your custom domain. - If you no longer use the custom domain, [delete it](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_delete.htm&release=264.0.0&type=5 "To stop serving a site via your custom domain, such as https://www.example.com, first delete the custom URLs for that domain. Then delete the domain in Salesforce. Or to point the domain to a different site, set up new custom URLs."). For example, a third-party CDN serves your custom domain and the corresponding external host name for the domain is cdn.example.com. You remove your custom domain from that CDN, but the domain record in Salesforce isn’t updated to remove the pointer from www.example.com to cdn.example.com. In this situation, an attacker can potentially create an account with that CDN and then set up your custom domain in that CDN to serve content that’s under their control. ## Move a Custom Domain to a New Org If you purchase a new production org, your old org continues to serve your sites with your custom domain. To move the domain to your new org, set up the domain, and then delete the domain in your old org. Or if you have multiple production orgs, you can move an existing domain to an org of your choice. See [Move a Domain to Another Production Org](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_move.htm&release=264.0.0&type=5 "If you purchase a new production org, your old org continues to serve your sites with your custom domain. To move the domain to your new org, set up the domain, and then delete the domain in your old org. Or if you have multiple production orgs, you can move an existing domain to an org of your choice."). ## Use a Different Domain Name to Serve Your Site Content Whether your brand changed or you simply want to use a different URL to serve your sites, you have two options. - To serve your site content on an additional domain, add the domain in Salesforce. More than one custom domain can serve the same site content. - To switch an existing custom domain to serve the site content on a different domain name and stop using the current domain, see [Change the Domain Name for a Custom Domain](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_change_name.htm&release=264.0.0&type=5 "Whether your brand changed or you want to use a different domain to serve your site content, you can change the domain name of an existing custom domain in Salesforce. Review these important steps to ensure a smooth transition and reduce the risk of takeover attacks."). ## Communicate Site Domain Changes A change to your domain can impact external users, such as visitors to your Experience Cloud sites. To review recommendations about communicating to these groups before and after you activate an updated domain, see [Notify Users and Customers About a My Domain Change](https://help.salesforce.com/s/articleView?id=xcloud.domain_name_plan_comms.htm&type=5&language=en_US). #### See Also - [Custom Domains](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt.htm&release=264.0.0&type=5 "Provide a branded experience for users who access your external-facing Salesforce content by serving your Digital Experiences or Salesforce Sites on a domain that you own, such as https://www.example.com.") - [Custom Domain Management](https://help.salesforce.com/s/articleView?id=platform.domain_mgmt_dom_detail.htm&release=264.0.0&type=5 "Keep your custom domain up to date with your business needs. Learn how to manage your domain during org migrations and certificate changes. Edit your domain’s configuration option, move to a different domain name, or enable HSTS preloading. And when you no longer need a custom domain, delete the domain and its custom URLs in Salesforce.")