How to restrict account creation for verified domains

Introduction

Domain reservation lets you reserve your company's email domain (for example, acme.com ). When you add and verify a domain, NordPass blocks account creation outside your organization for anyone with that email domain. 

 

This helps you: 

  • Ensure your team members can only join your organization. 
  • Avoid users accidentally creating personal accounts with work emails. 
  • Prevent the need to delete and recreate accounts when users sign up incorrectly.

 

This guide will explain to you how to use the Domain reservation feature.

 

Before you start

The Domain reservation feature is available for:

  • Organizations that are using any NordPass Business tier.
  • Owners or Admins with access to the NordPass Business Admin Panel.

 

When a person with an email from your reserved domain tries to: 

  • Create a new NordPass account (Personal or Business) 
  • Sign up for a free trial 
  • Use a coupon 
  • Purchase NordPass checkout 

    They will be blocked from account creation and receive an email with instructions on how to join your organization. They cannot create an account until they join your organization or use a different email domain.

 

Your chosen domain will have these statuses:

  • Verified - Domain is verified, account creation is restricted for this domain.
  • Pending - DNS record is added, NordPass is checking it. Wait up to 72 hours.
  • Unverified - Domain is added, but not yet verified. Add the DNS TXT record to verify.
  • Failed - Verification has failed. Double-check your DNS settings and click on the "Retry verification" button.

 

Here's what to do

How to add a domain

  1. Log in to the NordPass Business Admin panel as an organization's Owner or Admin.
  2. Next, click on the "Authentication" button, located on the left side, and select the "Restrict account creation for verified domains" option.
  3. Afterward, click on the "Add domain" button, enter the domain name you want to reserve, and click on the "Save" button.

    Note: Do not include "www", "http://", or email prefixes like "@".
     
  4. The domain will appear in the list - you must verify it before account creation is restricted for that domain.

 

How to verify your domain

  1. After adding a domain, the "Verify your domain" pop-up will appear.
  2. Alternatively, if the domain is pending, click the "Three-dots" button next to the domain and select the "Show details" button.
  3. Copy the TXD record shown; it would look like this: "nordpass-domain-verification=df6a00d9b7de33e00fb1991b7dc5f0974e4b9372f4dcd459589ea8d69439f14".
  4. Next, add this record to your domain's DNS settings:
    • Log in to your domain register or DNS provider (e.g., GoDaddy, Cloudflare, Google Domains)
    • Create a new TXT record
    • Set the Name/Host to "@" or your root domain (depending on your provider)
    • Paste the full verification value in the "Value" field
    • Save the changes
       
  5. Return to the NordPass Business Admin panel and check if the domain was verified.

    Note: Verification can take up to 72 hours. NordPass checks the verification every 15 minutes.
     
  6. Once verified, the domain status will change to "Verified", and account creation will be restricted for that domain.

 

Additional Tips

  • If the verification is stuck on "Pending":
    • Ensure the TXT record is added exactly as shown (no extra spaces or characters).
    • Some DNS providers use different formats; check your provider's documentation for TXT records.
       
  • If the verification has failed:
    • Double-check that the TXT record name and value match exactly.
    • Ensure you have added the record at the root domain (e.g., acme.com), not a subdomain.
    • Click on the "Retry verification" button after correcting your DNS settings.
       
  • If your organization uses the Data Breach Scanner and has added domains there, NordPass may suggest those domains when you add a domain. You can use the " Use for Account Creation Restriction" button to add them quickly. 

    Note: Domains already verified in the Data Breach Scanner can be added without verification — they are added as verified. Domains not yet verified in DBS must be verified before account creation is restricted.
     
  • Organizations have a domain limit. If you need to add more domains, click on the "Contact us" button, located in the domain list, enter the needed information, and select the "Send" button. A NordPass representative will get back to you within 24 hours.

Was this article helpful?