**Immediate Action Required: Verify Your Domains for Email Security starting March 9, 2026 By April 7, 2026**
**Important Date Change Update:
Salesforce deploys this change in Spring '26, patch 11 (moved from patch 10). To determine the patch version for your org, go to Trust Status, search for your My Domain name or instance, and then select your instance name.
With this change, verification is required for new domains in existing orgs and for all domains in new orgs, including new sandboxes.
In existing orgs, Salesforce generated a temporary allowlist of email-sending domains used between January 7, 2026, and February 25, 2026. In sandboxes, verification of those domains is required by April 7, 2026. In all other orgs, including production, verification of those domains is required by April 27, 2026.
What's happening?
To further strengthen the security of our email services, Salesforce is enforcing
strict domain ownership verification, starting March 9, 2026. This new requirement adds another layer of security to our existing user-level email address verification.
What’s Changing?
Salesforce sends user-authored emails only from verified domains, and email domain verification is now mandatory. Emails sent from unverified domains won't be delivered.
Sending email domains for common public email services, such as gmail.com and outlook.com, are exempt from the domain-level verification requirement. This change also has no impact on emails sent through Gmail and Office 365 (Outlook) integrations or emails sent via the Salesforce Einstein Activity Capture (EAC) tool.
Implementation Timeline
Salesforce deploys this change in Spring ’26, patch 10, starting March 9, 2026. To determine the patch version for your org, go to Trust Status, search for your My Domain name or instance, and select your instance name.
- New Sending Email Domains: New domains in existing orgs, and all domains in new orgs and new sandboxes, require immediate verification.
- Existing Sending Email Domains: In existing orgs, domains that have been used to send mail within the last 30 days must be verified by March 30, 2026 for sandboxes and April 27, 2026 for production orgs.
We recommend that you verify new, planned, and pre-used email sending domains as soon as possible.
Required Action
To continue sending emails from Salesforce without disruption, complete domain verification via one of these methods. With both methods, you make a minor update to your domain’s DNS records to verify ownership.
- DKIM (DomainKeys Identified Mail): Set up a DKIM key via the process detailed in Salesforce Help.
- Authorized Email Domains: Verify your domain ownership with Salesforce by following the process outlined in Salesforce Help. Users with an email address on an authorized and verified email domain can send email from that address through Salesforce.
User email address verification is still mandatory with no exceptions. For more information on the existing user verification process, see Manage User Email Address Verification.
How can I get more information?
If you require further assistance, open a case with Salesforce Customer Support via Salesforce Help.
Additional resources:
yes, this is what was communicated on 25th Mar, which says Prod deadline is 27 Apr and timeline article in the end of comms pointing to same article that you @Bhavin Patel
mentioned today, BUT the date on this article now reflects Apr 13 and for us Prod was impacted on Apr 13 for existing domain for which DKIM was there but DNS key was not matched.
