Guide → CRM & Email Marketing → Setting Up a Custom Email Domain
Authenticate your organization's domain to send emails from addresses like [email protected] — improving deliverability and brand trust.
Custom sending domains are available with High Activity and Enterprise
Bayanihan organizations can send via the shared @dasig.online domain at no subscription cost. Learn more →
Go to CRM Settings → Senders & Domains in your organization dashboard. Under the Custom Domain card, enter your domain name (e.g. mail.yourngo.org) and click Add.
Use a subdomain like mail.yourngo.org rather than your root domain. This protects your main domain's reputation and avoids conflicts with existing DNS records.
After adding your domain, Dasig will display 3 CNAME records generated by AWS SES. You need to add all three to your DNS provider (e.g. Cloudflare, Namecheap, GoDaddy, Google Domains).
[token1]._domainkey.mail.yourngo.org[token1].dkim.amazonses.com[token2]._domainkey.mail.yourngo.org[token2].dkim.amazonses.com[token3]._domainkey.mail.yourngo.org[token3].dkim.amazonses.comThe actual token values are generated uniquely for your domain and displayed in the Sender Settings page. Use the copy button next to each value to avoid typos.
DNS changes can take a few minutes up to 48 hours to propagate globally. Once your records are live, click the Check Verification button in Sender Settings. The domain status will change to Verified when all 3 DKIM CNAMEs resolve correctly.
Once verified, go to the Sender Profiles section and add a sender using your custom domain address (e.g. [email protected]). This sender will appear as the From address in your email campaigns.
I added the records but verification is still pending.
DNS propagation can take up to 48 hours. Try clicking Check Verification again later. You can also use a tool like MXToolbox or DNSChecker.org to confirm the CNAME records are live.
I only see 2 of the 3 CNAME records in my DNS provider.
All 3 must be added. Some providers hide records once saved — check the full record list, not just recently added ones.
Verification failed with status FAILED.
Double-check that the Host and Value are copied exactly, with no extra spaces or trailing dots. Delete and re-add the domain if needed — this generates fresh DKIM tokens from AWS SES.
My DNS provider uses @ for the root — how do I enter the host?
For subdomains like mail.yourngo.org, enter the full CNAME host name as shown (e.g. token._domainkey.mail.yourngo.org). Some providers automatically append your domain — check their docs.
AWS SES Official Documentation
For advanced configuration, sandbox removal, or production sending limits, see the AWS SES DKIM Easy Setup Guide ↗