# Domain Verification (/docs/getting-started/ownership-verification) # Domain Verification [#domain-verification] To ensure security and prevent data spoofing, you must verify ownership of your domain. We offer three methods to verify your site. ## Verification Methods [#verification-methods] Choose the method that best fits your technical setup.

DNS TXT Record

Best for domain-level verification without modifying website code.

### Copy the TXT Record [#copy-the-txt-record] Copy the verification token from your dashboard settings: ```text ucoder-site-verification=abc123456789xyz ``` ### Add to DNS Provider [#add-to-dns-provider] Log in to your domain registrar (GoDaddy, Namecheap, Cloudflare) and add a new record: | Type | Host / Name | Value | TTL | | :------ | :---------------------------------- | :----------------------- | :----- | | **TXT** | `_ucoderInsight.insights.ucoder.in` | `ucoder-insights-id=...` | `Auto` | ### Verify [#verify] Wait up to 48 hours for propagation, then click **Verify** in the dashboard.

Meta Tag Verification

Easiest for developers. Add a simple tag to your site's head for verification ownership.

### Copy Meta Tag [#copy-meta-tag] Get the code snippet from your dashboard: ```html ``` ### Paste in Head Section [#paste-in-head-section] Paste it into the `` section of your `index.html` or `layout.tsx` file (before the closing `` tag). ### Verify [#verify-1] Deploy your site and click **Verify**. *** ## What happens after verification? [#what-happens-after-verification] Once verified, you will see a success badge in your settings.

Domain Ownership Verified

Verified via METHOD\_NAME (`meta_tag`, `script`, `DNS`) on DATE & TIME

*** ## Understanding the Security Logic [#understanding-the-security-logic] Why do we force domain verification? It's not just a formality—it protects your account quota and data integrity. ### The Data Flow Process [#the-data-flow-process] Here is how our server decides whether to accept or reject an analytics event:

Verified Domain

The request `Origin` matches your verified list.
**Action:** Data is accepted and processed.
**Result:** Analytics appear on your dashboard instantly.

Unverified Domain

The request comes from an unknown source (e.g., a spam site).
**Action:** Request is blocked immediately ( `403 Forbidden` ).
**Result:** No data is recorded, protecting your quota.

### Why strict verification matters? [#why-strict-verification-matters] Without verification, anyone with your **Project ID** could send fake data to your dashboard.

Prevents Spam

Stops hackers from flooding your dashboard with garbage data.

Saves Quota

Ensures your monthly event limit isn't wasted by unauthorized sites.

Data Integrity

Guarantees that 100% of your analytics data comes from real users.