As part of our ongoing efforts to strengthen the security of our email services, email domain verification is required. Salesforce no longer delivers emails from unverified domains, even if the email addresses are individually verified.
With this change, delivery fails for emails sent from Salesforce if the email domain—the part after the at (@) symbol—isn’t verified via either an active DKIM key or a verified entry in the authorized email domain list.
This article details the dates when this change takes effect.
The requirement to verify email-sending domains rolls out in a staggered approach shortly after your org gets Spring ’26, patch 11. Salesforce is making every effort to start with orgs with the least volume and variability of email-sending domains.
Allowlist Generation: In late February 2026, Salesforce generated a temporary allowlist of email-sending domains for existing orgs. See Determine Your Temporarily Allowlisted Email-Sending Domains.
Spring ’26, Patch 11 Deployment
Salesforce started deploying this patch:
In sandboxes: March 24, 2026
In all other orgs, including production: March 26, 2026
To get the patch version for your org, go to Trust Status, search for your My Domain name or instance, and then click the maintenance tab.
With the initial requirement, Salesforce can send email only when the email address uses a verified domain or allowlisted domain. This means:
Verification is required for all email-sending domains added after February 25, 2026, regardless of whether you add the domain to a new or existing org.
Verification is required for existing email-sending domains that aren’t allowlisted.
Deployment Dates
Sandboxes: March 24–April 10
All other orgs, including production: April 13–24, 2026
How can you tell when this change is in effect?
When this change is in effect in your org, the Deliverability Setup page includes the Domain Verification section. See Check the Verification Status of Your Email-Sending Domains in Salesforce Help.
When this change is deployed in your org, the allowlisted domains must be verified. Salesforce can send email only when the email address uses a verified domain.
Deployment dates for this change
Sandboxes: April 14–24, 2026
All other orgs, including production: May 4–May 22, 2026
| Date | Notes |
| March 17, 2026 | Initial publication |
| March 20, 2026 |
|
| April 2, 2026 |
|
| April 10, 2026 | In the "Phase 1: New Email-Sending Domains and Existing Domains" section, clarified that the note about a feature is to help customers identify when the change is in effect. Also changed the feature to look for, because the previous feature will be available before the change is made in some orgs. |
Spring ‘26 Release Note: Verify Your Email Domain Ownership
Knowledge Article: Spring ’26 Email-Sending Domain Verification Requirement
Knowledge Article: Determine Your Temporarily Allowlisted Email-Sending Domains
Knowledge Article: Email-Sending Domain Verification FAQ
005316660

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.