Why the domain check says failed

A failed check means Keylight looked up your address and did not find the record it expects. It is nearly always one of these.

The change has not spread yet

DNS is not instant. A record added two minutes ago may not be visible yet. Wait and run the check again before changing anything, because editing a record that was already correct is how people turn a five minute wait into an afternoon.

The name has the domain in it twice

Registrars differ. Some want just the subdomain part in the name field, such as `reports`. Others want the whole thing, `reports.youragency.com`. Entering the full address into a field that already adds the domain produces `reports.youragency.com.youragency.com`, which resolves to nothing.

Check what the record looks like after saving rather than what you typed.

There is another record on the same name

A name can carry a CNAME or other records, not both. If an A record or an old CNAME is already sitting on that subdomain, remove it first.

It is proxied

If your DNS is behind a proxy, such as Cloudflare’s orange cloud, the lookup sees the proxy rather than the record. Turn proxying off for this subdomain.

Still failing

Email hey@trykeylight.com with the address you are trying to use. We will look up what your record is actually returning and tell you what we see.