> ## Documentation Index
> Fetch the complete documentation index at: https://docs.launchsafe.com/llms.txt
> Use this file to discover all available pages before exploring further.

# DNS Verification

> Verify domain ownership with a DNS TXT record before a black-box penetration test, proving you're authorized to scan the target.

Before running black-box (DAST) scans against a URL, LaunchSafe requires you to verify domain ownership via a DNS TXT record.

## Why verification is required

DNS verification ensures you **own or control** the domain being tested. This prevents unauthorized scanning of third-party applications.

## How to verify

<Steps>
  <Step title="Get your verification token">
    When you add a URL target, LaunchSafe generates a unique verification token for your workspace. It looks like:

    ```
    launchsafe-verify=ls_abc123def456
    ```
  </Step>

  <Step title="Add the DNS TXT record">
    Add a TXT record to your domain's DNS settings:

    | Type | Name               | Value                               |
    | ---- | ------------------ | ----------------------------------- |
    | TXT  | `@` or your domain | `launchsafe-verify=ls_abc123def456` |
  </Step>

  <Step title="Wait for propagation">
    DNS changes can take up to 48 hours to propagate, but typically complete within minutes.
  </Step>

  <Step title="Verify in LaunchSafe">
    Click **Verify** in your workspace settings. LaunchSafe will check the DNS record and mark your domain as verified.
  </Step>
</Steps>

## Common DNS providers

<AccordionGroup>
  <Accordion title="Cloudflare">
    1. Go to your domain in Cloudflare
    2. Click **DNS** → **Add Record**
    3. Type: **TXT**, Name: **@**, Content: your verification token
    4. Click **Save**
  </Accordion>

  <Accordion title="Namecheap">
    1. Go to **Domain List** → **Manage** → **Advanced DNS**
    2. Click **Add New Record**
    3. Type: **TXT**, Host: **@**, Value: your verification token
    4. Click **Save**
  </Accordion>

  <Accordion title="GoDaddy">
    1. Go to **My Products** → **DNS**
    2. Click **Add** under Records
    3. Type: **TXT**, Name: **@**, Value: your verification token
    4. Click **Save**
  </Accordion>
</AccordionGroup>

## Troubleshooting

<Warning>
  If verification fails, check that:

  * The TXT record value matches exactly (no extra spaces)
  * DNS has propagated (use [dnschecker.org](https://dnschecker.org))
  * You're verifying the correct domain (not a subdomain)
</Warning>