September 15, 2026: Sally rechecks verified domains before removing a verification
· 2 min read
A single wrong DNS answer no longer costs you your domain verification. Sally checks the TXT record of every verified domain once a day and asks each name server responsible for your domain directly. If the record is missing, Sally quietly checks again before anything changes.
Auto-join, Sign in only via Microsoft and Sign-in only via SSO keep working, even if your DNS provider has a short hiccup.
What's new?
- Rechecks first: after a wrong or missing answer, the domain stays verified and nobody gets an email. Sally checks again after 1, 6 and 24 hours, and one correct answer ends the recheck
- Removal only after four failed checks: only after four failed checks over at least 24 hours does Sally remove the verification. All owners and admins then receive the email Domain verification for <domain> lost
- Server errors don't count: timeouts and server errors at your DNS provider never count as a failed check
- Verified again on its own: put the record back exactly as Sally showed it, and the next daily check verifies the domain again without an email. Auto-join stays off until you switch it back on
Want the details? See Sally checks the record every day.
