Import Authorized Email Domains into a Sandbox

To skip DNS updates each time that you create a sandbox, specify the authorized email domains in production to copy to sandboxes. Then import them all into a sandbox with one click.

Where: This change applies to Lightning Experience and Salesforce Classic in all editions except Database.com.

When: Salesforce plans to deploys this feature between June 9, 2026, and June 14, 2026.

Why: When you add an authorized email domain, Salesforce generates a unique verification code. To verify ownership of the domain, you add the code to the domain's DNS record. When you import authorized email domains production, you eliminate the extra verification step, so sandbox environments are ready faster.

Note Salesforce recommends DKIM keys for email domain verification. However, to maintain the security of DKIM key email signatures, you can’t copy a DKIM key to a sandbox. If you use DKIM keys, enable the substitute outbound email address in your sandboxes. Or consider setting up an authorized email domain in production for each domain that you want to copy to sandboxes.

How: In production, from Setup, in the Quick Find box, enter Authorized Email Domains, and then select Authorized Email Domains. For each verified domain that you want to copy to sandboxes, edit the domain, select Allow Copy to Sandbox, and then save your changes.

In any sandbox, on the Authorized Email Domains page in Setup, click Import from Production.