As part of our ongoing efforts to strengthen the security of our email services, email domain verification is required. Salesforce no longer delivers emails from unverified domains, even if the email addresses are individually verified.
With this change, delivery fails for emails sent from Salesforce if the email domain—the part after the at (@) symbol—isn’t verified via either an active DKIM key or a verified entry in the authorized email domain list.
This article details the dates when this change takes effect.
The requirement to verify email-sending domains rolls out in a staggered approach shortly after your org gets Spring ’26, patch 11. Salesforce is making every effort to start with orgs with the least volume and variability of email-sending domains.
Allowlist Generation: In late February 2026, Salesforce generated a temporary allowlist of email-sending domains for existing orgs. See Determine Your Temporarily Allowlisted Email-Sending Domains.
Spring ’26, Patch 11 Deployment
Salesforce started deploying this patch:
In sandboxes: March 24, 2026
In all other orgs, including production: March 26, 2026
To get the patch version for your org, go to Trust Status, search for your My Domain name or instance, and then click the maintenance tab.
Salesforce only sends emails from verified or allowlisted domains. Verification is required for:
Email-sending domains added after February 25, 2026, regardless of whether you add the domain to a new or existing org.
Email-sending domains that aren’t allowlisted
Deployment Dates
| Environment | Start |
| Sandboxes | March 24 – April 10, 2026 |
| All other orgs (including Production) | April 13 – TBD, 2026 |
See Check the Verification Status of Your Email-Sending Domains in Salesforce Help.
When this change is deployed in your org, the allowlisted domains must be verified. Salesforce can send email only when the email address uses a verified domain.
Deployment Dates
| Environment | Start |
| Sandboxes | April 14 - TBD, 2026 |
| All other orgs (including Production) |
TBD |
Spring ‘26 Release Note: Verify Your Email Domain Ownership
Knowledge Article: Spring ’26 Email-Sending Domain Verification Requirement
Knowledge Article: Determine Your Temporarily Allowlisted Email-Sending Domains
Knowledge Article: Email-Sending Domain Verification FAQ
005316660

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.