Whitelabeling your account is one of the best things you can do to maintain good deliverability. However, the complexity of setting it up, and the variability of hosting provider settings can sometimes make the experience frustrating.

A common hurdle that many users encounter during the whitelabel process is that DNS records fail to validate, even though the records were just created! Below are some steps you can take to troubleshoot potential issues with recently created DNS records.

Allow Your DNS Records to Propagate

9 times out of 10, this validation issue can be solved with a judicious application of time. DNS records must take time to propagate throughout the internet before we can detect if they exist, and are indeed correct.

Propagation can take anywhere from a few hours to a few days, depending on your DNS host. We’ve found that popular hosts such as Godaddy and DNSMadeEasy will typically take around an hour or so to propagate new records out to where we can detect them.

We recommend giving DNS changes at least an hour to propagate, and then trying to validate the records again. If validation still fails, you can move on to verifying your records manually, or contact your DNS host to see if they can speed up the process or manually push the changes through for you.

Verify Your DNS Records Manually

To check if a DNS record has been propagated, use the simple Unix command DIG to check your whitelabel records. The easiest way to do this is to use Terminal on a Mac platform.

Use the commands from the table below to check the accuracy of records. The ANSWER section of the output should contain what is displayed in the answer column of the table. If the ANSWER section of the dig return is empty, that usually means that either the record does not exist or has yet to propagate.

Please note that the example records below will differ from those presented to you in the whitelabel process, be sure to use the records that are displayed in the SendGrid.com website.



Automated Security ON

Command Type ANSWER
dig cname sub.domain.com CNAME u123456.wl.sendgrid.net
dig cname s1._domainkey.sub.domain.com CNAME s1.domainkey.u123456.wl.sendgrid.net
dig cname s2._domainkey.domain.com CNAME s2.domainkey.u123456.wl.sendgrid.net

Automated Security OFF

Command Type ANSWER
dig mx sub.domain.com MX mx.sendgrid.net
dig txt m1._domainkey.sub.domain.com TXT k=rsa; t=s; p=MIGfMA0GC…
dig txt sub.domainkey.domain.com TXT v=spf1 include:sendgrid.net ~all

Email Links

Command Type ANSWER
dig cname links.domain.com CNAME sendgrid.net
dig cname 123456.domain.com CNAME sendgrid.net


Command Type ANSWER
dig a o1.default.domain.com A (your SendGrid IP address)

You can also use the DNSLookup tool provided by MxToolbox: simply enter the record you would like to check, and hit enter.

If you are able to successfully verify your DNS changes manually, and the whitelabel still will not accept them, feel free to contact Support, and we can help you investigate.

Check for TLD Auto-Appending

Some DNS hosts will automatically add your top-level domain to the end of DNS records you create, which can turn a CNAME for “email.domain.com” into “email.domain.com.domain.com”.

Be sure to follow the convention on existing records in your DNS panel when adding new ones, as sometimes you will only need to add what is to the left of the top-level domain.

i.e. A CNAME for “email.” becomes “email.domain.com”

Use GoDaddy? Watch our handy video guide for whitelabeling!


If you continue to have problems validating your whitelabel or you have further questions that have not been addressed here, please contact our Customer Support.