> ## Documentation Index
> Fetch the complete documentation index at: https://docs.paypal.ai/llms.txt
> Use this file to discover all available pages before exploring further.
# Set up your domain
Send PayPal invoice emails from your own domain instead of a paypal.com address. This guide shows you how to create a subdomain, configure the required DNS records, and verify your domain with PayPal.
## Prerequisites
* An active PayPal Business account
* A domain you own
* Access to your DNS provider's management console. DNS (Domain Name System) is the system that maps domain names to servers and stores records like TXT and CNAME. Common providers include Route 53, Cloudflare, GoDaddy, or equivalent.
* Check your domain settings to see if you have permission to add TXT and CNAME records.
> **Additional info**: A TXT record is a note attached to your domain, often used for verification and security. A CNAME record is a nickname that points a domain name to another domain name.
## Create a subdomain
A subdomain is a prefix added to your domain. It is configured through DNS records, not purchased separately. If you already have a subdomain, you can skip the following steps.
1. Log in to your DNS provider's dashboard and navigate to **DNS Records** or **Zone Editor** for your domain.
2. Add a new DNS record with the following fields:
| Field | Value |
| :---------------- | :----------------------------------------------------------------- |
| Type | A, AAAA, or CNAME depending on your setup |
| Name / Host | Your desired subdomain prefix, such as `api`, `staging`, or `docs` |
| Value / Points to | The IP address or hostname of the server handling the subdomain |
| TTL | `300` (5 min) for testing or `3600` for production |
3. Choose the right record type for your setup:
* **A record** points the subdomain to an IPv4 address
* **AAAA record** points the subdomain to an IPv6 address
* **CNAME record** points the subdomain to another hostname
DNS changes can take up to 72 hours to propagate. Consult your DNS provider's documentation for specific instructions.
Common providers include:
* [Amazon Web Services](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/CreatingNewSubdomain.html)
* [DreamHost](https://help.dreamhost.com/hc/en-us/articles/215457827-Adding-a-subdomain)
* [Cloudflare DNS](https://developers.cloudflare.com/dns/manage-dns-records/how-to/create-subdomain/)
* [GoDaddy](https://www.godaddy.com/en-in/help/add-a-subdomain-4080)
* [Squarespace](https://support.squarespace.com/hc/en-us/articles/205812058-Creating-a-subdomain-for-your-Squarespace-site)
* [HostGator](https://www.hostgator.com/help/article/what-is-a-subdomain-name-how-do-i-create-and-delete-one)
## Step 1: Add your subdomain
1. In the PayPal dashboard, select **Invoicing** > **Settings** > **Domain**.
2. Select **Get Started**.
3. Enter your subdomain.
4. Enter a sender email prefix. Common choices include `billing`, `invoices`, `noreply`. A preview of your full sender address appears as you type.
5. Select **Continue**.
> **Note:** Replies to invoice emails go to your PayPal-registered business email address, not to the custom sender address. No functioning inbox is required on the custom domain.
## Step 2: Configure DNS records
After you submit your domain, PayPal displays the required DNS records on the DNS configuration page. Add all three records to your DNS provider before starting the verification process.
PayPal uses the following three email authentication standards to verify your domain:
| Record | Type | Purpose |
| :---------------------------------- | :---- | :------------------------------------------------------------------------------------- |
| Sender Policy Framework (SPF) | TXT | Authorizes mail servers to send email on behalf of your domain |
| DomainKeys Identified Mail 1 (DKIM) | CNAME | Adds a digital signature to emails so recipients can verify they weren't tampered with |
| DKIM 2 | CNAME | Provides a backup DKIM key for continued email authentication |
Copy DNS records using the copy button to help prevent transcription errors.
> **Tip**: If another person manages your DNS settings, download the PDF generated for your domain from the DNS configuration page and share it with them. The PDF includes your domain's DNS records and setup instructions. The PDF includes your domain's DNS records and setup instructions.
1. Check whether an SPF record already exists for your subdomain. SPF records are TXT records that follow this format: `v=spf1 include:_spf.google.com ~all`.
2. If no SPF record exists, create a new TXT record using a hostname and the SPF value shown on the DNS configuration page.
3. If an SPF record already exists, do not create a new one. Only one SPF record is allowed for a subdomain. Instead, update the existing record with the new value shown on the DNS configuration page.
1. Select **Add New Record** and then select **CNAME** from the **Type** menu.
2. Add the CNAME record to your root domain's DNS settings.
3. Return to **Invoicing** > **Settings** > **Domain** and select **Get Started** to open the DNS configuration page. Copy the **Name** and **Value**, and enter them in your DNS provider.
4. Repeat these steps to add the second DKIM CNAME record.
Most DNS providers create a DMARC record by default. If your provider doesn't create a record by default, publish one as a TXT record using `_dmarc` as the name and the following tags:
| Tag | Description | Example |
| :--------------- | :------------------------------------------------------------- | :-------------------------- |
| `v` (required) | Protocol version. Must be `DMARC1` | `v=DMARC1` |
| `p` (required) | Domain policy. Accepted values: `none`, `quarantine`, `reject` | `p=none` |
| `rua` (optional) | Address to receive aggregate DMARC reports | `rua=mailto:dmarc@acme.com` |
For example:
```
TXT _dmarc v=DMARC1; p=none; rua=mailto:dmarc@acme.com
```
If you are new to DMARC, start with `p=none` for monitoring, then move to `quarantine` or `reject` once you are confident in your configuration.
> **Important:** PayPal does not support strict SPF alignment. Do not include `aspf=s` in your DMARC policy. If you are already using this domain to send email, consult an IT or email professional before modifying your DMARC record.
For instructions on adding DNS records, see the documentation for your DNS provider. Common providers include:
* [Amazon Route 53](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/resource-record-sets-creating.html)
* [Cloudflare](https://developers.cloudflare.com/dns/manage-dns-records/how-to/create-dns-records/)
* [DreamHost](https://help.dreamhost.com/hc/en-us/articles/360035516812-Adding-custom-DNS-records)
* [GoDaddy](https://www.godaddy.com/en-in/help/add-a-cname-record-19236)
* [Google Cloud DNS](https://docs.cloud.google.com/dns/docs/records)
* [Squarespace](https://support.squarespace.com/hc/en-us/articles/205812348-Accessing-your-Squarespace-managed-domain-s-DNS-settings)
## Step 3: Verify and activate
Once you've added all the DNS records, return to your PayPal dashboard to verify ownership and activate your domain.
1. In the PayPal dashboard, select **Invoicing** > **Settings** > **Domain**.
2. Select **Verify Domain**.
DNS changes can take up to 72 hours to propagate. Use [dnschecker.org](https://dnschecker.org) to confirm your records are published before selecting **Verify Domain**.
After the provider verifies the domain, open **Invoicing** settings and turn on domain. When the domain is active, all buyer-facing invoice emails are automatically sent from your custom sender address. Your existing invoice creation workflow continues to work exactly as before.
> **Important:** Do not delete your DNS records after verification. PayPal revalidates them regularly. If a record goes missing, custom sending is suspended, and emails revert to [service@paypal.com](mailto:service@paypal.com) until the records are restored.
### Verification status
After selecting **Verify Domain**, your domain enters one of the following states:
| Status | Description |
| :--------------- | :------------------------------------------------------------------------------------------ |
| Setup incomplete | Domain registered is awaiting DNS configuration and verification. |
| Verifying | Verification in progress can take up to 72 hours. |
| Verified | All DNS records confirmed. Activate domain. |
| Error | One or more checks failed. Review per-record status, correct the records, and verify again. |
### After activation
When your domain is active, all buyer-facing invoice emails are sent from your custom sender address automatically. No additional configuration is required.
* **Sender address:** Emails are sent from `{prefix}@{domain}`. For example, if your domain is `invoices.acme.com` and your prefix is `billing`, emails are sent from `billing@invoices.acme.com`.
* **Reply-to:** Buyer replies go to your PayPal-registered business email address, not the custom sender address.
* **CC recipients:** CC'd recipients see the custom domain as the sender.
Update your sender prefix, deactivate your domain, or switch to a different domain.
Resolve verification failures, bounce issues, and DNS configuration errors.