PreBreach Docs
PreBreach Docs
HomeFAQ
AI Agents
Billing
Domains
DNS Verification
Getting Started
Reports
Scanning
Domains

DNS Verification

Prove domain ownership by adding a DNS TXT record before scanning

DNS Verification

Before PreBreach can scan your domain, you must prove ownership by adding a TXT record to your domain's DNS configuration. This process is straightforward and typically takes only a few minutes.

Step-by-Step Guide

Step 1: Navigate to the Domains Page

Log in to your PreBreach dashboard and click Domains in the sidebar navigation.

Step 2: Click "Add Domain"

Click the Add Domain button in the top-right corner of the Domains page. A dialog will appear prompting you to enter your domain.

Step 3: Enter Your Domain

Type the root domain or subdomain you want to scan (e.g., example.com or app.example.com). Do not include the protocol (https://) or any trailing paths.

Step 4: Copy the TXT Record Value

After submitting, PreBreach will generate a unique verification token. You will see a TXT record value in the following format:

prebreach-verify=abc123def456

Click the Copy button to copy this value to your clipboard. Each domain receives a unique token, so make sure you copy the correct one.

Step 5: Add the TXT Record in Your DNS Provider

Log in to your DNS provider's dashboard and add a new TXT record with the following configuration:

FieldValue
TypeTXT
Name / Host@ (or leave blank for root domain)
Value / Contentprebreach-verify=abc123def456
TTLAuto (or 300 seconds)

Below are provider-specific instructions for the most common DNS providers.

Cloudflare

  1. Go to DNS > Records in your Cloudflare dashboard.
  2. Click Add Record.
  3. Set Type to TXT, Name to @, and paste the verification value into Content.
  4. Click Save.

Namecheap

  1. Go to Domain List > Manage > Advanced DNS.
  2. Click Add New Record.
  3. Select TXT Record, set Host to @, and paste the verification value into Value.
  4. Click the checkmark to save.

GoDaddy

  1. Go to My Products > DNS > Manage Zones.
  2. Search for your domain and click DNS.
  3. Click Add Record, select TXT as the type.
  4. Set Name to @, paste the verification value into Value, and click Save.

Vercel

  1. Go to your project's Settings > Domains.
  2. Select the domain and navigate to the DNS settings.
  3. Click Add Record, select TXT, set the name to @, and paste the verification value.
  4. Click Add.

Step 6: Click "Verify"

Return to the PreBreach dashboard and click the Verify button next to your domain. PreBreach will query your domain's DNS records to look for the TXT record you added.

Step 7: Wait for DNS Propagation

DNS changes can take time to propagate across the internet. In most cases, verification succeeds within a few minutes. However, depending on your DNS provider and TTL settings, propagation can take up to 48 hours.

If verification does not succeed immediately, wait a few minutes and try again. PreBreach will also periodically re-check pending domains automatically.

Troubleshooting

Verification keeps failing

  • Double-check the TXT record value. Make sure you copied the full string including the prebreach-verify= prefix.
  • Confirm the record type. The record must be a TXT record, not a CNAME or A record.
  • Check the host field. For root domains, the host should be @ or left blank. For subdomains like app.example.com, the host should be app.

DNS propagation is slow

  • Lower the TTL on your TXT record to 60 or 300 seconds if your provider allows it.
  • Use a tool like dnschecker.org to verify that your TXT record is visible globally.
  • Some providers cache records aggressively. If you recently changed DNS providers, allow extra time.

Record added but not detected

  • Ensure you are adding the record to the correct domain. If you registered app.example.com, the TXT record must be on the app subdomain, not the root.
  • Some DNS providers require you to omit the domain from the host field. For example, for example.com, you would enter @ rather than example.com.
  • If you have multiple DNS providers or a proxy (e.g., Cloudflare with proxying enabled), make sure the TXT record is set on the authoritative DNS.

I verified the domain but it still shows as pending

  • Allow up to 60 seconds for the status to update in the dashboard.
  • Try refreshing the page. If the status persists, click Verify again to trigger a manual re-check.

After Verification

Once your domain is verified, it will show a Verified badge on the Domains page. You can now:

  • Start your first scan on the verified domain.
  • Add additional domains up to your plan limit.
  • The TXT record can remain in your DNS indefinitely. Removing it will not revoke verification, but we recommend keeping it in place.

Domains

Manage the web applications you want to scan with PreBreach

Getting Started

Set up your PreBreach account and run your first AI-powered security scan in under 5 minutes.

On this page

DNS VerificationStep-by-Step GuideStep 1: Navigate to the Domains PageStep 2: Click "Add Domain"Step 3: Enter Your DomainStep 4: Copy the TXT Record ValueStep 5: Add the TXT Record in Your DNS ProviderCloudflareNamecheapGoDaddyVercelStep 6: Click "Verify"Step 7: Wait for DNS PropagationTroubleshootingVerification keeps failingDNS propagation is slowRecord added but not detectedI verified the domain but it still shows as pendingAfter Verification