Domain verification

Before a member allows an application, Moymo shows them whose it is. Domain verification is how an application proves that it controls a domain, so the consent screen can say Verified domain: example.com, and so that the links an application shows (terms, privacy, redirect addresses) are known to be its own.

The proof is a DNS TXT record: only the person who controls a domain's DNS can create it.

Verifying a domain

1. On the application's Verification tab, type your domain: example.com (a registrable domain, not an address with a path, and not an IP address).

2. The portal shows a record to create:

   Type	Name	Value
   TXT	_moymo-app.example.com	moymo-app-verification=3fa9d6e4c1b28a07b59e42d1f60c8a73

   The token in the value is made for this application and this domain. Copy it from the portal rather than typing it.

3. Create the record where your DNS is managed (your registrar, Cloudflare, ...). Some panels want the name relative to your domain: _moymo-app.

4. Choose Check now. DNS can take a few minutes to spread; check again if it is not there yet.

Moymo asks DNS directly (not through a cache), so a record you fixed a moment ago is seen as soon as DNS has it.

What the check can say

Answer	Means
Verified	The record is there.
We could not find the record yet	Nothing at _moymo-app.<domain>. It may not have spread, or it was saved in the wrong place.
There is a record, but it is not this one	Something is at that name but its value is not this one's. Copy the value again, or remove a record left from an earlier try. Moymo does not show what it found: a stranger's TXT record can say anything.
That domain does not seem to exist	It has no name servers. Check the spelling.
We could not reach DNS	A problem on Moymo's side, never reported as your mistake. Try again in a minute.

What a verified domain gives you

• Every address of your application is accepted when its host is the verified domain or a subdomain of it: example.com covers app.example.com and a.b.example.com, but not notexample.com and not example.com.evil.net.
• The consent screen shows Verified domain: example.com.
• The publish checklist accepts your terms, privacy and redirect links.

Rules

• Moymo's own domain and everything under it (moymo.net, anyone.moymo.net) cannot be claimed: addresses under it are members' profiles and Moymo's own pages.
• A bare ending such as co.uk cannot be claimed: it could never pass, and saying so now is kinder than a check that never turns green. Use the whole name you bought: example.co.uk.
• A domain can be verified for one developer at a time: the first to prove it keeps it. Several of your own applications can share a domain. If someone else has verified a domain that is yours, contact support.
• You can add up to 10 domains to an application.

After it is verified

The record is checked again every few hours. You can leave it in place; you should, because if it is gone for three checks in a row the domain stops counting as verified, and the publish checklist reports the links on it as unverified. (A single missed check changes nothing visible, so a registrar having a bad minute costs you nothing. Pressing Check now never counts against a verified domain.)

A domain you remove loses its verification at once.