Custom Domain DNS and Bind Troubleshooting
How to interpret DNS pending, DNS verified, disabled, and bound states, and what to check when branded-host setup does not progress.
Where you see this in the app
This guidance applies to Settings → Custom domains, especially once a hostname has already been saved and the page is showing DNS instructions or a status badge.
The two required DNS records
The page tells the user to add two DNS records before binding:
| Record | Purpose |
|---|---|
CNAME | Points the branded hostname at the gateway |
TXT | Proves domain ownership / verification |
If either one is missing or incorrect, the setup may stall at a pending state.
Status labels and what they usually mean
The status badge is the first troubleshooting clue.
| Status | What it usually means |
|---|---|
Requested | The host request exists but validation has not advanced yet |
DNS pending | DNS has not propagated correctly or verification has not completed yet |
DNS verified | Verification succeeded and TLS binding is still finishing |
Bound (TLS ready) | The host is live and TLS is ready |
Disabled | The host is present but not active for normal use |
DNS pending does not necessarily mean the feature is broken. It often just means the DNS records are not visible yet to the system.
Bind step and common failures
Bind is the step that tells the platform to verify DNS and issue managed TLS.
Common reasons the bind step does not advance are:
- the
CNAMEpoints to the wrong destination, - the
TXTvalue does not match exactly, - DNS propagation is incomplete,
- the user is trying too early after adding records,
- the hostname is not the expected subdomain shape.
The page itself warns users to add the records first, wait for propagation, and then click Bind.
What to check before retrying
Before trying Bind again, the user should verify:
- the hostname is a subdomain they control,
- the
CNAMEtarget matches the page instructions, - the
TXTrecord name and value match exactly, - enough time has passed for propagation,
- the page is not showing
Bound (TLS ready)already.
If the page shows DNS verified, the safest action is usually patience rather than changing the records again immediately.
See it in action
Previous
Custom Domains and Branded Hosts
How branded hosts are requested, what the DNS and Bind steps mean, and what changes once your domain is live.
Next
API Webhook Delivery Status and Troubleshooting
How to read the webhook rows in account settings, what last error means, how retry timing works from a user standpoint, and how to troubleshoot PAT and webhook setup problems.