Add and verify a domain
Resend sends emails using a domain you own. Before you can send or receive emails with Resend, you must have a verified domain associated with your account.
Add a domain
Section titled “Add a domain”You can add and verify a domain you own in four ways:
- in the Domains Dashboard page
- using the Resend API
- with a Resend CLI command
- with the Resend MCP server
To add a new domain from the Resend Dashboard:
Click the Add Domain button.
Enter a domain including a subdomain to use for your Resend emails.
We strongly recommend sending emails from a subdomain (e.g.,
notifications.example.com) instead of your root domain (example.com) to conform to deliverability best practices.Choose a subdomain that reflects the purpose of your emails, such as
customers.example.comorupdates.example.com.You can have multiple subdomains associated with your root domain. But, each one must be configured and verified individually.
If you add a domain already used by another team, the dashboard will notify you and you can claim the domain to transfer it to your team.
Choose a region from the list provided.
Select a region to send your emails from. Choose one that is closest to the majority of your recipients.
(optional) Enter a custom subdomain for the Return-Path address if desired.
Return-Path defaults to
send.example.com, although you can provide a custom path.Update your DNS records with values provided by Resend.
View the Records tab for your domain to find the records to provide to your DNS host provider. Adding these records will verify that you own the domain and have the correct permissions to send and receive emails.
Provide the DKIM and SPF configurations (
TXTandMXorCNAMErecords) to your DNS provider. These records must match exactly what Resend generated. Copy and paste the records to avoid configuration errors.Wait for DNS verification to complete
When this process is completed correctly, your domain will often verify within 15 minutes of adding the DNS records. However, DNS changes can occasionally take up to 72 hours to propagate globally.
You can use Resend's dns.email tool to check that your records are visible publicly. If verification has not completed after 72 hours, use the “Restart verification” button in the Resend dashboard to trigger a fresh verification check.
Add a DMARC record.
After your domain is verified, you can then implement DMARC to build additional trust in your domain and protect against email spoofing.
This is an email authentication protocol to verify email senders and to allow receivers to reject unauthenticated messages, and is important for email deliverability.
(optional) Update your domain's Resend configuration options.
After your domain is verified, you may wish to enable open and click tracking or enforce Transport Layer Security (TLS).
Learn more
Section titled “Learn more”Manage domains
View, create, edit, delete, and manage your domains.
Multi-tenant domain setup
Learn how to configure Resend for SaaS platforms where tenants send emails from their own domains.