At some point, almost every Canadian business owner setting up their online presence hits the same wall: a service - Google Search Console, Google Workspace, HubSpot, Mailchimp, or dozens of others - asks you to "verify domain ownership" by adding a CNAME record to your DNS. If you've never touched DNS before, this can feel intimidating. It's not. Here's exactly how to do it.
Why Services Ask You to Verify Your Domain
Verification proves that you control the domain, not just that you know the domain name. Without this step, anyone could claim to own your domain in a third-party service and see your data or send on your behalf. A CNAME record (or TXT record - we'll cover both) can only be added by someone with access to your DNS settings, which means only the legitimate domain owner.
Understanding CNAME Records
A CNAME record (Canonical Name) maps one hostname to another. Normally, CNAMEs are used to point subdomains at other destinations - for example, pointing shop.yourdomain.ca at a Shopify store. For verification purposes, services have you create a CNAME with a specific, unique name and value that only they know. When they check DNS and see that record, they know you added it - which proves you control the domain.
Step-by-Step: Verifying with Google Search Console
Google Search Console uses a HTML file upload or HTML meta tag method by default, but the Domain property type uses a DNS TXT record. For individual URL-prefix properties, you can use CNAME, meta tag, or Google Analytics. Here's how CNAME/DNS verification works in the most common scenarios:
Google Workspace (formerly G Suite)
- Sign into admin.google.com and start the domain setup wizard.
- Google will show you a CNAME record to add. It looks like:
- Name/Host:
google._domainkey(or a unique string likegoogleXXXXXXXX) - Value/Destination:
google.comor a specific Google hostname
- Name/Host:
- Log into your DNS provider (your registrar or hosting control panel).
- Find DNS Management or DNS Zone Editor.
- Add a new CNAME record with the name and value Google provided.
- Save the record.
- Return to Google's verification page and click Verify.
DNS changes typically take a few minutes to propagate on most hosting platforms, but can take up to 48 hours in rare cases. Google will keep checking for up to 72 hours.
Google Search Console (URL-prefix property with CNAME)
- In Search Console, choose URL prefix and enter your site URL.
- Under Other verification methods, select Domain name provider.
- Google provides a TXT record (for Domain properties) or a CNAME value.
- Add the record to your DNS exactly as shown - the name and value must be exact.
- Click Verify once you've added it.
Where to Add the CNAME Record
If your domain is hosted with dotCanada: Log into your control panel, navigate to DNS Zone Editor or DNS Management, select your domain, and add a CNAME record using the values provided by the service you're verifying with.
If you're using cPanel: Go to Domains > Zone Editor, click Manage next to your domain, and use the Add Record button to add a CNAME.
If your domain is at a separate registrar (like GoDaddy or Namecheap): Log into the registrar, find DNS settings for your domain, and add the CNAME there. The fields are usually labelled Host (or Name) and Value (or Points To).
Common CNAME Verification Mistakes
Adding the full domain in the Name field. If the service tells you the CNAME name is google12345abc, enter just google12345abc - not google12345abc.yourdomain.ca. Most DNS interfaces add the domain automatically. If you include the full domain, the record ends up as google12345abc.yourdomain.ca.yourdomain.ca which won't verify.
Getting Name and Value reversed. The Name is the subdomain you're creating. The Value (or Points To) is where it points. Don't swap them.
Using a CNAME at the root domain. You cannot create a CNAME for your root domain (yourdomain.ca itself). CNAMEs only work on subdomains. If a service asks you to add a CNAME at the root, they mean a TXT record - or they've made an error in their instructions.
Not waiting for propagation. If verification fails immediately after adding the record, wait 15-30 minutes and try again. DNS changes don't always appear instantly.
Other Services That Use the Same Process
The CNAME/TXT verification pattern is used by:
- HubSpot (for email tracking domains and branded links)
- Mailchimp (for DKIM authentication)
- Facebook Business Manager (domain verification)
- Shopify (custom domain connection)
- Microsoft 365 (domain ownership verification)
- Zoom (vanity URL setup)
The mechanics are identical each time - you're given a name and a value, you add the record, you wait a few minutes, you verify. Once you've done it once, you'll find it straightforward every subsequent time.

