[Yandex Cloud documentation](../../index.md) > [Yandex Cloud Postbox](../index.md) > [Step-by-step guides](index.md) > Domain ownership check

# Domain ownership verification

To send emails, confirm domain ownership. After creating an address, DKIM signature settings will be generated on its page. Specify them as the values of the resource records you need to add to your domain zone. You can add the records via your registrar or in [Yandex Cloud DNS](../../dns/index.md), if you have delegated your Yandex Cloud domain.

{% list tabs group=dkim %}

- Simple setup {#easy}

    With the simple setup, Yandex Cloud Postbox automatically generates DKIM keys. The two CNAME records you need to add to your DNS provider are displayed under **Email signature configuration (DKIM)** on the address page.

    **Example of creating resource records in Yandex Cloud DNS**

    1. In the [management console](https://console.yandex.cloud), select the folder containing the address and your domain zone.
    
       If you do not have a [public DNS zone](../../dns/concepts/dns-zone.md#public-zones) yet, [create](../../dns/operations/zone-create-public.md) one:
    1. Navigate to **Cloud Postbox**.
    1. Select the new address and open the **Email signature configuration (DKIM)** section.
    1. For each of the two CNAME records, complete the following steps:
    
        1. Navigate to **Cloud DNS**.
        1. Select your domain zone.
        1. Click **Create record**.
        1. In the **Type** field, select `CNAME`.
        1. Enter the record name from the **Email signature configuration (DKIM)** section on the address page into the **Name** field, omitting the domain.
    
           {% note info %}
    
           Other DNS services may require a full record name, including the domain.
    
           {% endnote %}
    
        1. In the **Data** field, paste the record value from the **Email signature configuration (DKIM)** section on the address page.
        1. In the **TTL (in seconds)** field, specify the record lifetime.
        1. Click **Create**.
    1. Navigate to **Cloud Postbox**.
    1. Select the address you created.
    1. Wait for Yandex Cloud Postbox to verify the DKIM signature settings. If the records are correct, the verification status on the address page will change to `Success`.

- Advanced setup {#advanced}

    With the advanced setup, you need to manually [generate the key](create-address.md) for the DKIM signature. The **Email signature configuration (DKIM)** section on the address page displays a single TXT record you need to add to your DNS provider.

    **Example of creating resource records in Yandex Cloud DNS**
    
    1. In the [management console](https://console.yandex.cloud), select the folder containing the address and your domain zone.

        If you do not have a [public DNS zone](../../dns/concepts/dns-zone.md#public-zones) yet, [create](../../dns/operations/zone-create-public.md) one:
    1. Navigate to **Cloud DNS**.
    1. Select your domain zone.
    1. Click **Create record**.
    1. In the **Name** field, specify the name portion generated when creating the address, omitting the domain in `<selector>._domainkey` format, e.g., `postbox._domainkey`.

        {% note info %}

        For other DNS services, you may need to copy the entire record. The final record must look like this: `<selector>._domainkey.<domain>.`, e.g., `postbox._domainkey.example.com.`.

        {% endnote %}

    1. In the **Type** field, select `TXT`.
    1. Paste the contents of the **Value** field under **Email signature configuration (DKIM)** into the **Data** field. Note that the record value must be enclosed in quotes, such as follows:

        ```text
        "v=DKIM1;h=sha256;k=rsa;p=M1B...aCA8"
        ```

        {% note info %}

        Other DNS services may have different requirements for resource record formatting. For more information, refer to your DNS provider’s guides.

        {% endnote %}

    1. In the **TTL (in seconds)** field, specify the record lifetime.
    1. Click **Create**.
    1. Navigate to **Cloud Postbox**.
    1. Select the address you created.
    1. Wait for Yandex Cloud Postbox to verify the DKIM signature settings. If the record is correct, the verification status on the address page will change to `Success`.

{% endlist %}

DNS server responses are cached, so you may experience delays when updating the resource record. If the verification status does not change within 24 hours, click **Run verification**.