---
schema_version: "1"
id: 604968944d08e73ae2fcadeaeebe4faa0a23e925e1a40a4bb9d6b107d53b6f7c
title: Verify Your Email Domain Ownership
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_sales_productivity_email_domain_verify.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_productivity_email_domain_verify.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 84039b1d477cf0744c05bc258882f942ed1593d4a1e37eb7d06a36e5116eec4c
description: To avoid disruption in email sent from Salesforce, verify the domains that you own with a DomainKeys Identified Mail (DKIM) key or an authorized email domain. As part of our ongoing efforts to strengthen the security of our email services, email domain verification is now mandatory. Salesforce no longer delivers emails from unverified domains, even if the email address is verified.
products:
  - Cross Cloud
release: "262"
---
# Verify Your Email Domain Ownership

To avoid disruption in email sent from Salesforce, verify the domains that you own with a DomainKeys Identified Mail (DKIM) key or an authorized email domain. As part of our ongoing efforts to strengthen the security of our email services, email domain verification is now mandatory. Salesforce no longer delivers emails from unverified domains, even if the email address is verified.

**Where:** This change applies to Lightning Experience and Salesforce Classic in all editions except Salesforce Free Suite and Database.com. This change has no impact on trial orgs.

This change doesn't affect emails sent through Gmail™ and Office 365® (Outlook) integrations or via Einstein Activity Capture tool (“Inbox”). Emails that end in @gmail.com, @hotmail.com, or @outlook.com are also exempt from the domain-level verification requirement. And domain verification isn’t required for Marketing Cloud or Marketing Cloud Advanced emails.

**When:** In existing orgs, Salesforce generated a temporary allowlist of email-sending domains used over several weeks in January and February 2026. For more information, see [Determine Your Temporarily Allowlisted Email-Sending Domains](https://help.salesforce.com/s/articleView?id=005316952&type=1&language=en_US).

Salesforce is rolling out this change gradually. The rollout began in March 2026. See [Mandatory Sending-Email Domain Verification Timeline](https://help.salesforce.com/s/articleView?id=005316660&type=1&language=en_US).

**Why:** This change affects emails sent from Salesforce and related automations with an email-sending domain that Salesforce doesn’t own, including system-generated emails.

For example, if your users’ email addresses are in the format `name@example.com`, verify that you own `example.com`. Similarly, Salesforce can’t send system-generated emails from an organization-wide address with an unverified domain, even if the individual email address is verified.

For more information, see [Spring ’26 Email-Sending Domain Verification Requirement](https://help.salesforce.com/s/articleView?id=005316090&type=1&language=en_US).

**How:** Verify each of your email-sending domains. Each domain and subdomain requires separate verification via an active DKIM key. If you can’t use a DKIM key, configure a verified entry in the Authorized Email Domains list in Setup.

To minimize disruption, enable a substitute email address for unverified domains. On the Deliverability page in Setup, select **Use a substitute email address for unverified domains**, and then save your changes. To help prevent disruption due to undelivered email, Salesforce enables that setting in all orgs June 23–July 3, 2026.

#### See Also

- [_Salesforce Help:_ Determine How to Verify Your Email-Sending Domains](https://help.salesforce.com/s/articleView?id=xcloud.security_user_email_verification_domain_auth.htm&type=5&language=en_US)
- [_Salesforce Help:_ Create a DKIM Key](https://help.salesforce.com/s/articleView?id=sales.emailadmin_create_secure_dkim.htm&type=5&language=en_US)
- [Keep Email Flowing for Users with Unverified Domains](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_productivity_email_substitute_unverified.htm&release=262.0.0&type=5 "Enable users whose email domains you can’t verify—such as users with public email addresses, consultants, and site users—to send email from Salesforce. With your substitute email address, the user’s display name remains unchanged, but the From address uses an organization-wide email address or an email address that ends with .sfcustomeremail.com. This option also applies to system-generated emails and emails sent via shared email accounts with an unverified domain.")
- [Check Your Domain’s Verification Status](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_productivity_email_domain_check_status.htm&release=262.0.0&type=5 "To avoid email delivery failures for emails sent from Salesforce, check your domain’s verification status. Salesforce now sends emails only from verified domains.")
- [_Salesforce Help:_ Requirements to Send Email from Salesforce](https://help.salesforce.com/s/articleView?id=xcloud.security_email_verification_requirements.htm&type=5&language=en_US)