verify.yourbrand.com instead of verify.didit.me. Users stay on your domain for the whole journey, which removes the last visible reference to Didit in a white-label flow.
Custom domain is part of White Label and must be enabled on your account. You also need write access to Customization — members with read-only access see the section disabled.
Requirements
How it works
You enter your subdomain in the Business Console. Didit then generates two DNS records for you to add at your provider:
Both records are required. Once they resolve, you verify ownership from the console and the flow starts serving from your domain.
Set up your domain
1
Add the domain
Go to Business Console → White Label → Domain, enter your subdomain (for example
verify.yourbrand.com), and click Add Domain.The console generates your DNS records. This takes a few seconds.2
Copy the two records
The console shows a card for each record — Verification CNAME and CloudFront CNAME. Each card gives you two values:
3
Add both records at your DNS provider
Create both records as
CNAME. Adding only the CloudFront record is the most common reason verification fails later.Set the TTL to 300 so any correction you make afterwards propagates in minutes instead of hours.4
Verify ownership
Back in the console, click Verify domain. On success the panel changes to Domain verified and the button disappears.If it fails, the console shows a Verification failed box with the specific reason. Read it before you change anything — it names the record that is missing or incorrect.
DNS usually propagates within minutes, but it can take up to 24–48 hours. If the console reports DNS changes detected, your records are correct and propagation is still finishing — no action needed.
Change or remove your domain
To move the flow to a different subdomain, enter the new one and click Update Domain. Didit issues a new pair of records, so you have to add those at your DNS provider and verify again. To go back toverify.didit.me, clear the field and click Remove Domain.
While a custom domain is configured, you cannot re-enable the Didit login screen. Remove the domain first.
Troubleshooting
500 error, or a message about another CloudFront distribution
500 error, or a message about another CloudFront distribution
Your subdomain has an
A record conflicting with the CNAME — a host cannot have both. Delete the A record and keep only the CNAME.If there is no A record, the CloudFront CNAME points at the wrong target. Match it character for character against the Data/URL value in the console.Verification never succeeds
Verification never succeeds
Check that both records exist at your provider. Adding only the CloudFront record is the most common cause, because the flow appears to load while the certificate never issues.The Verification failed box in the console names the record that is missing or wrong.
The certificate never issues (Cloudflare)
The certificate never issues (Cloudflare)
Set both records to DNS only — the grey cloud, proxy off. The orange-cloud proxy intercepts the request and breaks certificate issuance.Providers without a proxy toggle, such as cPanel, are not affected.
The record name gets duplicated
The record name gets duplicated
Some providers append your zone automatically, turning
verify.yourbrand.com into verify.yourbrand.com.yourbrand.com.On those providers, enter the relative name rather than the full one the console shows — verify instead of verify.yourbrand.com, and _abc123.verify instead of _abc123.verify.yourbrand.com. Then re-open the saved record and check that the full name it stored matches the console Hostname exactly.A correction is taking hours to apply
A correction is taking hours to apply
Your records are cached for the length of their TTL. Lower the TTL to
300 and wait for the previous value to expire before testing again.Next steps
- Match the rest of the UI to your brand — colors, logo, and typography live in the White Label style editor.
- Enable your style per workflow — branding only applies to workflows with Include custom style turned on. See White Label.
- Review your disclosure obligations — a custom domain hides Didit’s branding but not its role. See compliance responsibilities.