Action Required: Salesforce Email Domain Verification

Overview

Salesforce now requires every organization to verify the email-sending domains it uses. Verifying a domain confirms to Salesforce that your organization owns the sending address and is authorized to send from it. This is a Salesforce platform-level change, not a Practifi-specific update, and it affects every Salesforce customer.

Verifying your domain keeps your outbound email working the way your clients expect. When your domain is verified, messages from your Practifi organization continue to arrive from your own corporate address, which protects your deliverability and keeps your brand consistent in every client inbox. This applies to all outbound email from your organization, including workflow-triggered messages, alerts, and emails sent directly by users.

What Is Changing and When

For production organizations, Salesforce applies the change in two steps:

• Between June 17 and June 27, 2026, Salesforce enables a substitute From address for any domain that is not yet verified. 
• Between June 29 and July 27, 2026, Salesforce will remove the temporary allowlist that has been keeping unverified domains working.

What Happens If a Domain Is Not Verified

Your emails will still be sent, but they will not look the way you want them to. By default, Salesforce replaces your corporate sending address with a substitute generic address in this format:

email@<orgId>.sfcustomeremail.com

Your messages continue to go out, but they arrive from an unfamiliar Salesforce address rather than your own domain, which can confuse clients and hurt trust in your communications. Email is only blocked entirely if your administrator turns off the substitute address option. Verifying your domain is what keeps your email sending from your real corporate address.

What Your Salesforce Administrator Needs to Do

Verification is a Salesforce Setup task that requires a change to your domain DNS records, so your Salesforce Administrator will need to work with whoever manages your domain DNS. Your administrator verifies each email-sending domain in one of two ways: by setting up a DKIM Key, or by adding the domain under Authorized Email Domains. Both methods require adding a DNS record to confirm ownership.

Practifi has published a full guide that walks through what this change means and the specific steps to complete verification.

Read the full guide: Understanding Email Domain Verification

Please note: Domain verification requires System Administrator permissions and a DNS change. If you are not a Salesforce Administrator, share this article with your admin team and whoever manages your domain DNS so they can take action.

Questions?

If you have questions about this requirement or need help getting started, contact your Client Success Manager or submit a support request.