> Index of every Falcon docs page, for assistants: https://falcon.com/docs/llms.txt

# Verify a work domain

On Trusted domains, add a work domain, create its DNS TXT record, and choose Check now. Proof gives nobody a staff seat.

In the company settings rail, choose **Trusted domains**. The address is `/settings/security/trusted-domains`. The heading is **Trusted domains**. The line under it is **Prove the work domains your company controls. Domain proof gives nobody a staff seat.** Only a company administrator can change the list. Anyone else sees **Only a company administrator may change trusted domains.**

## Add a work domain

- The section is **Add a work domain**. The note is **Each subdomain needs its own proof. Personal email domains cannot be used.**
- Enter **Work domain**, such as `example.com`, and choose **Add domain**.
- A personal email domain is refused with **Personal email domains cannot be added.** A domain another company already uses says **Another company already uses this domain. Ask to join that company.** An empty or unusable name says **Enter a work domain, such as example.com.**
- When it is added, the page says **Domain added. Create the DNS record below, then choose Check now.**
- With none yet, the page says **No trusted domains yet.**

## Create the DNS record and check it

- Under **Proof**, open **DNS proof**. The note is **Create this TXT record with your DNS provider. Keep it in place so the proof can be checked again.**
- Copy **TXT record name** and **TXT record value** and create that record with the DNS provider.
- Choose **Check now**. While it looks, the page says **Looking for the record...**
- Not found: **The record was not found. Check its name and value, then try again.** Found: **Domain verified.** The status becomes **Verified**.
- Before that the status is **Needs verification**. **Last checked** says **Not checked yet** until the first check.

**Automatic checks aren't running yet. Use Check now to check the record.** A missing record is not found until someone chooses **Check now**.

## Pause or remove

- **Pause this domain** says **Pausing prevents access. Checking the proof never removes your pause.** A pause you set reads **You paused it.** A proof that went missing reads **Its proof went missing.** The status is **Paused**.
- A check that finds the record while you have paused it says **Domain verified. Access remains paused.** Turning the pause off says **Your pause was removed. Current proof still determines access.** A check that still cannot find the record says **The proof is still missing. Access stays paused.**
- **Remove domain** opens **Remove trusted domain**. **Cancel** leaves it. Removing ends member access through this domain. The page says recorded data stays and this does not erase memory. Afterward: **Domain removed. Member access through this domain has ended; recorded member data is retained.**

Saving, pausing or removing can open **Confirm it's you**. The line is **Change trusted domains asks for your second step before anything changes.**

## Related

- [How people sign in](https://falcon.com/docs/sign-in-methods)
- [Sign in with Microsoft](https://falcon.com/docs/microsoft-sign-in)
- [Require a second step](https://falcon.com/docs/require-a-second-step)
- [What a trusted domain does](https://falcon.com/docs/trusted-domain-access)
- [Access levels](https://falcon.com/docs/people-access-levels)
- [Company settings](https://falcon.com/docs/company-settings)