For: Agency Owner or Admin · Time: about 15 minutes of your time (plus waiting) · Frequency: Once
Trigger
You want your team and your client practices to sign in at your address — for example portal.youragency.com — with your logo and colors, instead of app.credentik.com.
Outcome
Your sign-in page lives at your own address, shows your branding (with a small "Powered by Credentik" note), and everyone signs in with the same account they already have.
Where
- Settings → Branding → Custom domain — the step-by-step guide with your exact records, copy buttons and a Check now button.
Three words you'll see
- DNS — the internet's address book. Your DNS provider is the company where you manage your domain's records — usually where you bought the domain (GoDaddy, Namecheap…) or your website host.
- CNAME record — a signpost that says "this address lives over there". It sends visitors of your new address to Credentik.
- TXT record — a short note on your domain. Ours contains a code only you can see, which proves to us that you control the domain.
Steps
1. Choose your address
Pick a sub-address of a domain you already own. We recommend one of:
portal.youragency.comcredentialing.youragency.comcred.youragency.com
Type it into Settings → Branding → Custom domain and click Add domain. (If you type just youragency.com, we'll suggest these for you.)
Why not just youragency.com? Your main website already lives there. A sub-address lets Credentik run alongside your website without touching it — and DNS rules don't allow the record we need on the bare domain anyway.
2. Add two records at your DNS provider
The settings screen shows your exact records with copy buttons. They look like this (for cred.youragency.com):
| Type | Name / Host — what to type | Value / Target / Content |
|---|---|---|
| CNAME | cred | credentik-app.pages.dev |
| TXT | _credentik-verify.cred | credentik-verify=… (your personal code — copy it from the screen) |
- Most providers add
.youragency.comto the name for you, so type only the short name (cred,_credentik-verify.cred). The screen also shows the full name for providers that want it. - Use the copy buttons — one wrong character and the check fails.
- The TXT record must stay in place forever. We re-check it every hour and pause your address if it disappears.
Provider-by-provider
Cloudflare — dash.cloudflare.com → click your domain → DNS → Records → Add record. Type CNAME, Name cred, Target credentik-app.pages.dev, Proxy status Proxied (orange cloud) is fine → Save. Add record again: Type TXT, Name _credentik-verify.cred, Content your code → Save.
GoDaddy — godaddy.com → My Products → Domains → click your domain → DNS tab → Add New Record. Type CNAME, Name cred, Value credentik-app.pages.dev, TTL 1 Hour → Save. Add New Record again: Type TXT, Name _credentik-verify.cred, Value your code → Save.
Namecheap — Domain List → Manage next to your domain → Advanced DNS tab → Host Records → Add New Record. CNAME Record: Host cred, Value credentik-app.pages.dev, TTL Automatic → click the green check mark. TXT Record: Host _credentik-verify.cred, Value your code → green check mark.
Squarespace Domains (incl. former Google Domains) — account.squarespace.com/domains → click your domain → DNS → DNS Settings → Custom records → Add record. Host cred, Type CNAME, Data credentik-app.pages.dev → Save. Add record again: Host _credentik-verify.cred, Type TXT, Data your code → Save.
Microsoft 365 (only if Microsoft manages your DNS) — admin.microsoft.com → Settings → Domains → click your domain → DNS records tab → + Add record. Type CNAME (Alias), Host name or Alias cred, Points to address credentik-app.pages.dev → Save. + Add record again: Type TXT (Text), TXT name _credentik-verify.cred, TXT value your code → Save.
Wix — Domains page → ⋯ (Domain Actions) next to your domain → Manage DNS Records. In CNAME (Aliases) → + Add Record: Host name cred, Value credentik-app.pages.dev → Save. In TXT → + Add Record: Host name _credentik-verify.cred, Value your code → Save.
AWS Route 53 — Route 53 → Hosted zones → click your domain → Create record. Record name cred, Record type CNAME, Value credentik-app.pages.dev, TTL 300 → Create records. Create record again: Record name _credentik-verify.cred, Record type TXT, Value "credentik-verify=…" (Route 53 needs the double quotes) → Create records.
Another provider — look for "DNS", "DNS records", "Zone editor" or "Advanced DNS". Every provider has the same two fields under different names: Name (Host, Alias) and Value (Target, Points to, Data, Content).
My IT team manages our DNS
On the settings screen click Copy instructions for IT (or Open in my email app). It drafts an email with both records and the exact values — paste it to your IT person or web developer. It's a 5-minute job for them.
3. Check and go live
Click Check now on the settings screen. You don't have to keep the page open — we also check every hour.
How long it takes
- DNS changes usually show up within 5–60 minutes; occasionally up to 24 hours.
- Once we see your records, activation (connecting your address and issuing its padlock certificate) is usually done within 1 business day.
What each status means
| Status | What it means | What to do |
|---|---|---|
| Waiting for DNS | We haven't seen your records yet. | Add them, then click Check now. |
| Verified — activating | Your records are right and ownership is confirmed. We're connecting your address and issuing its security certificate. | Nothing — leave both records in place. Keep using app.credentik.com until it says Live. |
| Live | Your address works. | Share it with your team and practices. |
| Needs attention | The TXT record disappeared, so we paused the address. | Put the record back (same name and value) and click Check now — it recovers by itself. |
Signing in at your new address
- Everyone keeps the same account: same email, same password, same two-step verification.
app.credentik.comkeeps working — nobody is locked out while you switch, and old bookmarks still work.- Share the new link (for example
https://cred.youragency.com/v2/) with your team and client practices.
Troubleshooting
- "Check now" can't find the TXT record. Most often the name got doubled: many providers add
.youragency.comfor you, so typing the full name creates_credentik-verify.cred.youragency.com.youragency.com. Edit the record and enter only_credentik-verify.cred. Also check the value was pasted exactly, with no spaces or quotes (except on AWS Route 53, which needs quotes). - The provider won't let me add the CNAME ("record already exists" / conflict). The name already has another record — usually an A or AAAA record, or an old CNAME. A name can only have one of these. Delete the existing record for that name (only that one), then add the CNAME.
- Cloudflare: orange or grey cloud? Proxied (orange) is fine. If your address is still "activating" after a business day, switch the CNAME to DNS only (grey) and contact support.
- Typos. Use the copy buttons. The CNAME value ends in
.pages.dev(or.credentik.com) with nohttps://and no slash; the TXT value starts withcredentik-verify=. - I can't find where my DNS is managed. Look up your domain on a free "whois" or "DNS lookup" site: the Name servers line names the company (e.g.
ns1.godaddy.com→ GoDaddy,*.ns.cloudflare.com→ Cloudflare). Or send the instructions to your IT team. - Live, but the browser shows a security warning. The certificate can take a little longer after go-live. Wait 15 minutes and reload. If it persists, contact support — don't ask your team to click through the warning.
Watch-outs
- Plan feature. Custom domains are part of custom branding; if your plan changes, the address stops showing your branding until it's re-enabled.
- Removing a domain stops sign-in at that address immediately.
app.credentik.comkeeps working. - Up to 5 addresses per agency. The first one that goes live becomes your primary address.
Related jobs
- Brand the platform — logo and colors that show on your sign-in page
- Add and manage staff users — tell your team about the new address
Something on this page doesn’t match what you see in the app? Email support@credentik.com and we’ll fix the guide.