Amazon SES domain verification TXT records - Amazon Simple Email Service Classic

This is the user guide for Amazon SES Classic. Updates and new features are only being documented in the new Amazon SES Developer Guide which we recommend to use.

Amazon SES domain verification TXT records

Your domain is associated with a set of Domain Name System (DNS) records that you manage through your DNS provider. A TXT record is a type of DNS record that provides additional information about your domain. Each TXT record consists of a name and a value.

When you initiate domain verification using the Amazon SES console or API, Amazon SES gives you the name and value to use for the TXT record. For example, if your domain is example.com, the TXT record settings that Amazon SES generates will look similar to the following example:

Name Type Value

_amazonses.example.com

TXT

pmBGN/7MjnfhTKUZ06Enqq1PeGUaOkw8lGhcfwefcHU=

Add a TXT record to your domain's DNS server using the specified Name and Value. Amazon SES domain verification is complete when Amazon SES detects the existence of the TXT record in your domain's DNS settings.

Note

Some DNS providers automatically append your domain name to DNS record names. To avoid duplication of the domain name, you can add a period (.) to the end of the domain name in the DNS record, or omit your domain from the record name. For more information, see the documentation for your DNS provider.

If your DNS provider does not allow DNS record names to contain underscores, you can omit _amazonses from the Name. In that case, for the preceding example, the TXT record name would be example.com instead of _amazonses.example.com. To make the record easier to recognize and maintain, you can also optionally prefix the Value with amazonses:. In the previous example, the value of the TXT record would therefore be amazonses:pmBGN/7MjnfhTKUZ06Enqq1PeGUaOkw8lGhcfwefcHU=.

Note

Amazon SES previously allowed TXT record names to contain amazonses without an underscore. If you have already verified a domain and your TXT record contains amazonses without an underscore, your domain will continue to be verified; there is no action required on your part. However, any new domains that you verify will require that amazonses in the TXT record name is either preceded by an underscore, or _amazonses is removed from the TXT record name entirely.

You can find troubleshooting information and instructions on how to check your domain verification settings in Common domain verification problems.

Adding a TXT Record to Your Domain's DNS Server

The procedure for adding TXT records to your domain's DNS server depends on who provides your DNS service. Your DNS provider might be Amazon Route 53 or another domain name registrar such as GoDaddy. This section provides procedures for adding a TXT record to Route 53, as well as generic procedures that apply to other DNS providers.

When you begin the process of verifying a new domain for use with Amazon SES, you can automatically add the domain verification TXT record to your Route 53 configuration. However, if you choose not to add the TXT record automatically, you can add the TXT record to your Route 53 configuration manually by completing the procedure in this section.

To add a TXT record to the DNS record for your Route 53-managed domain

  1. Open the Amazon SES console at https://console.aws.amazon.com/ses/.

  2. Under Identity Management, choose Domains.

  3. Choose the domain that you want to verify.

  4. Expand the Verification section. Copy the value shown next to TXT Value.

  5. Open the Route 53 console at https://console.aws.amazon.com/route53/.

  6. In the navigation pane, choose Hosted zones.

  7. Choose the domain that you want to add a TXT record to.

  8. Choose Create record.

  9. For Routing policy, choose Simple routing, and then choose Next.

  10. Choose Define simple record.

  11. In the Define simple record pane, do the following:

    1. For Record name, enter _amazonses.

    2. For Value/Route traffic to, choose IP address or another value depending on the record type. Then, in the text area, paste the TXT record value that you copied from the Amazon SES console.

    3. For Record type, choose TXT.

    4. For TTL (seconds), type 1800.

    5. Choose Define simple record.

  12. Wait for about 30 minutes for the record to propogate. Then, on the Domains page in the Amazon SES console, check the value in the Status column next to the domain. If the status is "pending verification," wait for another 30 minutes, and then choose refresh ( ). Repeat this process until the value in the status column is "verified."

The procedures for adding TXT records to the DNS configurations vary from provider to provider. For specific steps, consult your DNS provider's documentation. The procedure in this section gives a basic overview of the steps you take when adding a TXT record to the DNS configuration for your domain.

To add a TXT record to your domain's DNS server (general procedure)

  1. Go to your DNS provider's management console and sign in to your account.

  2. Find the page for updating your domain's DNS records. This page might have a name similar to one of the following examples: DNS Records, DNS Zone File, or Advanced DNS. See the documentation provided by your DNS provider for more information.

  3. Add a TXT record with the name and value provided by Amazon SES.

    Important

    Some DNS providers, such as GoDaddy, automatically append the domain name to the end of DNS records. Adding a record that already contains the domain name (such as _amazonses.example.com) might result in the duplication of the domain name (such as _amazonses.example.com.example.com). To avoid duplication of the domain name, add a period to the end of the domain name in the DNS record, or just omit your domain from the record name. See the documentation provided by your DNS provider for more information.

  4. Save your changes. DNS record updates can take up to 48 hours to take effect, but they often take effect much sooner. You can verify that the TXT record is correctly published by using the procedure in Checking domain verification settings.