About domain verification
After verifying ownership of your organization's domains, a "Verified" badge will display on the organization's profile.
To display a "Verified" badge, the website and email information shown on an organization's profile must match the verified domain or domains. If the website and email address shown on your organization's profile are hosted on different domains, you must verify both domains. If the website and email address use variants of the same domain, you must verify both variants. For example, if the profile shows the website www.example.com
and the email address info@example.com
, you would need to verify both www.example.com
and example.com
.
If you confirm your organization’s identity by verifying your domain and restricting email notifications to only verified email domains, you can help prevent sensitive information from being exposed. For more information see "Best practices for preventing data leaks in your organization."
Verifying a domain for your organization
To verify a domain, you must have access to modify domain records with your domain hosting service.
-
In the upper-right corner of GitHub, select your profile photo, then click Your organizations.
-
Next to the organization, click Settings.
-
In the "Security" section of the sidebar, click Verified and approved domains.
-
Next to "Verified & approved domains for your enterprise account", click Add a domain.
-
Under "What domain would you like to add?", type the domain you'd like to verify, then click Add domain.
-
Follow the instructions under "Add a DNS TXT record" to create a DNS TXT record with your domain hosting service.
-
Wait for your DNS configuration to change, which may take up to 72 hours. You can confirm your DNS configuration has changed by running the
dig
command on the command line, replacingTXT-RECORD-NAME
with the name of the TXT record created in your DNS configuration. You should see your new TXT record listed in the command output.dig TXT-RECORD-NAME +nostats +nocomments +nocmd TXT
-
After confirming your TXT record is added to your DNS, follow steps one through three above to navigate to your organization's approved and verified domains.
-
To the right of the domain that's pending verification, select the dropdown menu, then click Continue verifying.
-
Click Verify.
-
Optionally, once the "Verified" badge is visible on your organization's profile page, you can delete the TXT entry from the DNS record at your domain hosting service.
Approving a domain for your organization
Note: The ability to approve a domain not owned by your organization or enterprise is currently in public preview and subject to change.
-
In the upper-right corner of GitHub, select your profile photo, then click Your organizations.
-
Next to the organization, click Settings.
-
In the "Security" section of the sidebar, click Verified and approved domains.
-
Next to "Verified & approved domains for your enterprise account", click Add a domain.
-
Under "What domain would you like to add?", type the domain you'd like to verify, then click Add domain.
-
To the right of "Can't verify this domain?", click Approve it instead.
-
Read the information about domain approval, then click Approve DOMAIN.
Removing an approved or verified domain
-
In the upper-right corner of GitHub, select your profile photo, then click Your organizations.
-
Next to the organization, click Settings.
-
In the "Security" section of the sidebar, click Verified and approved domains.
-
To the right of the domain to remove, select the dropdown menu, then click Delete.