acme.com. Verification happens once, through a DNS record, and unlocks the identity and provisioning features that depend on knowing which users belong to your company.
Once a domain is verified, Lovable can treat anyone signing in with an email on that domain (for example jane@acme.com) as a member of your organization, and apply your workspace’s authentication and provisioning rules to them.
- Available on: Business and Enterprise plans
- Access: Workspace admins and owners
- Location: Identity (Settings → Access → Identity → Verified domains)
Why verify a domain
You need at least one verified domain before you can use most workspace identity features:- SSO: connect a SAML or OIDC identity provider for your workspace. See Set up workspace single sign-on (SSO).
- Enforce SSO: require all workspace members to sign in through your identity provider.
- Verified email sign-up: automatically add users who sign up with an email on your verified domain to your workspace, with a default role you choose. No SSO needed.
- SSO sign-in provisioning: automatically add users to your workspace the first time they sign in through your SSO provider.
- Add existing users: a one-time action that adds existing Lovable users with verified-domain emails to your workspace.
- SCIM provisioning: sync users and groups from your identity provider on the Enterprise plan. See Set up SCIM user provisioning.
- Branded app URLs: publish apps under a workspace subdomain derived from your verified domain. See Publish apps with branded URLs.
Prerequisites
- A workspace on the Business or Enterprise plan.
- An owner or admin role in the workspace.
- Access to your domain’s DNS settings (through your DNS provider, such as Cloudflare, GoDaddy, or AWS Route 53).
Verify a domain
1
Add your domain in Lovable
Go to Identity (Settings → Access → Identity), and under Verified domains, click Add domain. Enter your domain, for example
acme.com. Wildcards are not supported.2
Create the DNS TXT record
Lovable shows a DNS record to create. In your DNS provider, add a record with:
3
Wait for DNS propagation
DNS changes can take anywhere from a few minutes to 72 hours, though most providers apply them within minutes.
4
Verify the domain
Back in Lovable, click Verify domain.
When the check succeeds, you see a Domain Verified! confirmation, and the domain appears in your Verified domains list with a Verified badge.
If this is the first domain you verify, Lovable automatically turns on Verified email sign-up with the default role set to editor, so colleagues who sign up with a company email join your workspace automatically. You can change the default role or turn this off under User provisioning on the same page.
How domain verification works
- Verification is a one-time check. Lovable checks the DNS record when you click Verify domain. Verified domains do not expire and are not re-checked later.
- You can verify multiple domains. Add each domain your organization uses, for example
acme.comandacme.co.uk. - Verifying a domain does not reserve it. Another workspace can verify the same domain. If your organization runs several workspaces, each one verifies the domain separately.
- Changes are audited. Adding and removing verified domains is recorded in your workspace audit logs.
Remove a verified domain
- Go to Identity (Settings → Access → Identity).
- In the Verified domains list, click the trash icon next to the domain.
- Confirm in the Delete verified domain dialog.
Troubleshooting
Could not find TXT record for domain
Could not find TXT record for domain
The DNS record is not visible to Lovable yet. This usually means one of:
- The record has not propagated. DNS changes can take up to 72 hours, though minutes is typical. Wait and try again.
- The record is on the wrong host. The TXT record must be on the root of the domain (
@), not on a subdomain likewww. - The value does not match. The value must be the full
lovable_verification=token exactly as shown, with no extra characters or quotes added by your DNS provider.
Could not lookup TXT record for domain
Could not lookup TXT record for domain
Lovable could not query DNS for the domain at all. Check that the domain is spelled correctly and is a real, registered domain with active DNS.
The domain shows as already verified
The domain shows as already verified
The domain is already in your workspace’s verified list. You do not need to do anything.
FAQ
Do I need a verified domain to set up SSO?
Do I need a verified domain to set up SSO?
Yes. Verifying a domain is the first step of SSO setup, and the SSO configuration flow walks you through it if you have not done it yet.
Does domain verification expire?
Does domain verification expire?
No. Lovable checks the DNS record once, when you click Verify domain. A verified domain stays verified until you remove it from your workspace.
Can I remove the TXT record after verification?
Can I remove the TXT record after verification?
Verification is checked once, so removing the record does not un-verify the domain. Keeping the record in place is recommended so you can verify again easily if you ever remove and re-add the domain.
Can two workspaces verify the same domain?
Can two workspaces verify the same domain?
Yes. Verification proves ownership to a workspace; it does not claim the domain exclusively. If your organization runs several workspaces, each one verifies the domain separately and configures its own identity settings.
What happens to members if I delete a verified domain?
What happens to members if I delete a verified domain?
Nothing immediately. Existing members keep their access and their sessions stay active. The domain stops working for SSO sign-in, and if it was your last verified domain, Enforce SSO and Verified email sign-up turn off automatically.
Can I restrict sign-ups on my domain to SSO only?
Can I restrict sign-ups on my domain to SSO only?
Workspaces with SSO can additionally restrict account creation on a verified domain so new users must start through the SSO flow instead of email/password or social login. Contact Lovable support to enable this restriction for your domain.