How long it lasts
Verification is valid for 90 days. We re-check automatically every 30 days, so leave the DNS record, file or meta tag in place.
If a re-check fails
The asset moves to Re-verification required. Scans and monitoring on it pause and you are notified. Publish the token again (it can be shown again in the portal) and press Check verification. If your site was merely unreachable during the automatic re-check, we keep the verification and try again later.
When your DNS changes
We remember which addresses your asset resolved to when you verified it. If it later resolves to new addresses (outside the same /24 for IPv4 or /48 for IPv6), we re-check your token before scanning them. A scan started in the meantime is refused for about a minute while the check runs.
- With the file or meta-tag method, every new address has to serve the token itself.
- With DNS TXT, the record is checked again.
- If the check passes, the new addresses are remembered, which suits CDNs that rotate addresses. If it fails, the asset becomes Re-verification required.
- Subdomains approved to inherit their parent's verification need to be approved again after such a change.