Skip to main content

5️⃣ Validate a domain

This article will help you correctly configure your domains and ensure all your attacks are sent.

ℹ️ This article is a duplicate of the “Verify a domain” article that you can find in the “Getting Started with Riot” section.

❶ Introduction

👉 Why do I need to verify ownership of my domain?

We are required to verify domain ownership to prevent any domain spoofing attempts and therefore potential attacks.

👉 Where can I verify my domains?

Go to Settings > Domains > Verify


How do I verify my domain?

👉 Step 1: Verify ownership of my domain name

2 options :

  • I select my generic email address

  • I use the DNS method

👉 Step 2: Filter Riot phishing emails

  • API method (recommended)

👍 API method (recommended)

The API method allows attacks to be delivered directly into the user’s mailbox. It is much less time-consuming than the manual method, which requires whitelisting all domain names as well as configuring whitelisting in your anti-spam solution if necessary.

  • Manual method :

You will need to validate all domains manually using the documentation below.

👉 Step 3: Allow Riot on your external tools (if necessary)

If you are using an external anti-spam solution, you will need to authorize Riot to ensure domains are properly delivered.


👉 Step 4: Validate the Whitelist

To test that the whitelisting has been correctly configured, you will need to send a test email to an admin.

💡 Prerequisite:

To select the admin, the admin email address must belong to the domain being validated.

For example, if I want to validate the address “[email protected]”, I must have an admin registered on my platform with an email address such as “[email protected]”.

If no admin appears in the dropdown menu, I can add one via Settings > Members.

Did this answer your question?