1
Enter your domain
✓Use the apex domain (example.com), not www. We will also generate a record for www. automatically.
Advanced options
Defaults to https://<domain>/.well-known/wab.json
2
Your signed identity
✓3
Deploy to DNS
✓Choose your DNS provider. We'll call its API server-side using a token you paste here. The token is never stored — it's used for a single request.
Cloudflare → Use a scoped API token to add the TXT record automatically.
- Open Cloudflare → My Profile → API Tokens
- Create token → Template: Edit Zone DNS → select your zone → Continue → Create
- Paste the token below. It is sent once and discarded.
Required permission: Zone → DNS → Edit on the target zone.
Vercel → Only works if your domain uses Vercel DNS nameservers.
- Open Vercel → Account → Tokens
- Create a token (full account or team scope)
Netlify → Requires the domain to use Netlify DNS.
- Netlify → User settings → OAuth → Personal access tokens
- Generate a new token
Other providers (GoDaddy, Namecheap, Route53, Plesk, cPanel…)
Copy the TXT records below and paste them into your DNS control panel. Each provider has its own UI, but the values are the same.
Copy the TXT records below and paste them into your DNS control panel. Each provider has its own UI, but the values are the same.
4
Verify trust score
✓DNS propagation typically takes 1–5 minutes. Click Verify to run the public trust scorer against your domain.