# Domain verification

> How Faivelo verifies your DNS is live.

Before you can create mailboxes on a domain, Faivelo confirms that every required DNS record is actually live on the public internet. This page explains how that check works and how long it typically takes.

## How checking works

For each record on your domain's DNS page, Faivelo queries public DNS resolvers (Cloudflare's `1.1.1.1` and Google's `8.8.8.8`) and compares what the world sees with what's expected. Using public resolvers means the check reflects what real mail servers will see — not a cached or internal view.

Each record gets one of three statuses:

<table>
<thead>
  <tr>
    <th>
      Status
    </th>
    
    <th>
      Meaning
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <strong>
        Verified
      </strong>
    </td>
    
    <td>
      The record exists and its value matches
    </td>
  </tr>
  
  <tr>
    <td>
      <strong>
        Pending
      </strong>
    </td>
    
    <td>
      No record found yet — it hasn't been added, or hasn't propagated
    </td>
  </tr>
  
  <tr>
    <td>
      <strong>
        Mismatch
      </strong>
    </td>
    
    <td>
      A record exists at that name, but its value is wrong
    </td>
  </tr>
</tbody>
</table>

Your domain is marked **Verified** once every record passes. Until then it shows a **Pending DNS** badge in your domain list.

## When checks run

You don't have to sit and refresh — verification runs on its own:

- **Right after you add a domain**, Faivelo checks in the background at roughly 30 seconds, 2 minutes, and 5 minutes. If you used [automatic DNS setup](/domains/automatic-dns-setup), your domain often verifies on the very first pass.
- **Continuously after that**, every unverified domain is re-checked automatically every few minutes until it passes. You can add your records, walk away, and come back to a verified domain.
- **During onboarding**, the DNS step polls live every few seconds and moves you forward the moment everything verifies.

## Checking manually

On your domain's DNS page there's a **Re-check All** button (labelled **Check now** during onboarding) that runs a fresh verification immediately and updates each record's status and last-checked time. Use it right after saving records at your provider.

If your registrar is connected with an API key, you'll also see **Re-apply DNS records**, which pushes the full record set to your registrar again — handy if a record was deleted or edited by mistake.

## How long does propagation take?

DNS changes don't appear everywhere instantly. Realistic expectations:

- **Automatic setup:** usually verified within a couple of minutes.
- **Manual setup at most providers:** a few minutes to an hour.
- **Worst case:** up to 48 hours, typically when a record with a long TTL (time-to-live) was recently changed, or when a registrar's own systems are slow to publish.

<docs-aside type="tip">

If a record still shows **Pending** after an hour, double-check it was actually *saved* at your provider — the most common cause is a record sitting unsaved in an edit form. If it shows **Mismatch**, Faivelo displays the value it currently sees so you can spot the difference.

</docs-aside>

## Does verification ever un-stick a working domain?

Verification is about getting your domain live. Once verified, your domain stays usable; Faivelo focuses its recurring checks on domains that haven't passed yet.

## Next steps

- Something stuck? See [Troubleshooting DNS](/domains/troubleshooting).
- Verified? [Create a mailbox](/mailboxes/creating-mailboxes).