The Domains tab of your organization's settings is where you claim an
email domain, for example acme.example, for your organization. Once the
domain is verified you can switch on auto-join: anyone registering with an
email address on that domain is offered membership during onboarding and
confirms it themselves.
Verification runs through a TXT record in your domain's DNS. That is how you prove you control the domain.
Claiming and verifying a domain
Enter the domain in the field on the Domains tab and click Add domain. You can claim your own domains; the portal rejects public email providers such as
gmail.com.The portal immediately shows the host and value of the TXT record next to the new entry:
Field Value Host _codecharter.your-domain, for example_codecharter.acme.exampleType TXT Value codecharter-verify=<token>, with the token from the portalCopy puts the complete value on your clipboard. Many DNS providers append the domain in the host field automatically, in which case you only enter
_codecharterthere.Create the record with your DNS provider and save it.
Click Check now on the domain entry. The portal looks up the TXT record and compares it against the expected value.
New DNS entries take time to become visible everywhere, anywhere from a few minutes up to 48 hours depending on your provider and the previous record's TTL. If the first check comes back empty, simply wait: the portal re-checks every claimed domain once a day on its own.
Switching on auto-join
Auto-join applies to all verified domains of the organization. On the same tab, switch it on with Offer auto-join to verified domains and pick the Default role on auto-join below it. The list offers every role up to your own level, see Roles and permissions.
The offer appears during onboarding for new registrations. Every member confirms joining themselves.
Statuses and check outcomes
The status sits to the right of the domain:
| Status | Meaning |
|---|---|
| Unverified | The domain is claimed. The TXT record is still missing or has not propagated yet. |
| Verified since <date> | The TXT record was found. The domain counts for auto-join from that point on. |
After every check the entry also shows the outcome of the last check and when it ran:
| Outcome | Meaning |
|---|---|
| Verified | The TXT record was found and matches. |
| TXT record not found yet | The record is still missing or has not propagated yet. A normal intermediate state. |
| The check failed (DNS error) | The DNS lookup itself did not get through, for example a server error or a timeout. This says nothing about your TXT record and does not count as a failed attempt. Trying again later is enough. |
Automatic and manual checks
Every claimed domain is checked automatically once a day, whether it is already verified or not. If you do not want to wait until the next day, for example right after creating the record, use Check now. The button runs the same check immediately and is limited to three checks per five minutes per domain. Beyond that, the portal asks you to try again in a few minutes.
If the portal stops finding the record of a verified domain three times in a row, for example because the record was deleted by accident, the domain falls back to Unverified. Recreate the record and the next check verifies it again. A claim that was never verified expires after 30 unsuccessful checks, and the domain is released again.
Removing a domain
Remove next to the domain deletes the claim after a confirmation. Existing members keep their access; only future auto-joins through this domain end. If it was the organization's last verified domain, the member-visible verified badge goes away as well.