[{"data":1,"prerenderedAt":779},["ShallowReactive",2],{"navigation":3,"/teams/custom-domains":282,"surround:/teams/custom-domains":774},[4,26,71,93,127,143,243,269],{"title":5,"path":6,"stem":7,"children":8,"page":25},"Getting Started","/getting-started","1.getting-started",[9,13,17,21],{"title":10,"path":11,"stem":12},"Introduction","/getting-started/introduction","1.getting-started/1.introduction",{"title":14,"path":15,"stem":16},"Quick Start","/getting-started/quick-start","1.getting-started/2.quick-start",{"title":18,"path":19,"stem":20},"Key Concepts","/getting-started/key-concepts","1.getting-started/3.key-concepts",{"title":22,"path":23,"stem":24},"Changelog","/getting-started/changelog","1.getting-started/4.changelog",false,{"title":27,"path":28,"stem":29,"children":30,"page":25},"Guides","/guides","2.guides",[31,35,39,43,47,51,55,59,63,67],{"title":32,"path":33,"stem":34},"Quick Share Guide","/guides/quick-share","2.guides/01.quick-share",{"title":36,"path":37,"stem":38},"Slack Integration","/guides/slack-integration","2.guides/02.slack-integration",{"title":40,"path":41,"stem":42},"Browser Extension","/guides/browser-extension","2.guides/03.browser-extension",{"title":44,"path":45,"stem":46},"Enterprise Setup","/guides/enterprise-setup","2.guides/04.enterprise-setup",{"title":48,"path":49,"stem":50},"Creating a Share","/guides/creating-a-share","2.guides/05.creating-a-share",{"title":52,"path":53,"stem":54},"Zero-Knowledge Custody","/guides/zero-knowledge-custody","2.guides/06.zero-knowledge-custody",{"title":56,"path":57,"stem":58},"Secure Requests","/guides/secure-requests","2.guides/07.secure-requests",{"title":60,"path":61,"stem":62},"Receiving a Secure Request","/guides/receiving-a-secure-request","2.guides/08.receiving-a-secure-request",{"title":64,"path":65,"stem":66},"SecurePaste","/guides/securepaste","2.guides/09.securepaste",{"title":68,"path":69,"stem":70},"Notifications","/guides/notifications","2.guides/10.notifications",{"title":72,"icon":73,"path":74,"stem":75,"children":76,"page":25},"Account","i-lucide-user-cog","/account","3.account",[77,81,85,89],{"title":78,"path":79,"stem":80},"Signing In","/account/signing-in","3.account/1.signing-in",{"title":82,"path":83,"stem":84},"Plans and Share Allowance","/account/plans-and-share-allowance","3.account/2.plans-and-share-allowance",{"title":86,"path":87,"stem":88},"Billing and Subscription","/account/billing-and-subscription","3.account/3.billing-and-subscription",{"title":90,"path":91,"stem":92},"Plans and Limits","/account/plans-and-limits","3.account/4.plans-and-limits",{"title":94,"icon":95,"path":96,"stem":97,"children":98,"page":25},"Teams","i-lucide-users","/teams","4.teams",[99,103,107,111,115,119,123],{"title":100,"path":101,"stem":102},"Teams and Contexts","/teams/teams-and-contexts","4.teams/1.teams-and-contexts",{"title":104,"path":105,"stem":106},"Members, Roles and Seats","/teams/members-roles-and-seats","4.teams/2.members-roles-and-seats",{"title":108,"path":109,"stem":110},"Joining a Team","/teams/joining-a-team","4.teams/3.joining-a-team",{"title":112,"path":113,"stem":114},"Custom Branding","/teams/custom-branding","4.teams/4.custom-branding",{"title":116,"path":117,"stem":118},"Custom Domains","/teams/custom-domains","4.teams/4.custom-domains",{"title":120,"path":121,"stem":122},"Policy and Audit","/teams/policy-and-audit","4.teams/5.policy-and-audit",{"title":124,"path":125,"stem":126},"Zero-Knowledge for Teams","/teams/zero-knowledge-for-teams","4.teams/6.zero-knowledge-for-teams",{"title":128,"path":129,"stem":130,"children":131,"icon":142},"Help","/help","5.help/0.index",[132,134,138],{"title":133,"path":129,"stem":130},"Help and Support",{"title":135,"path":136,"stem":137},"Link Not Working","/help/link-not-working","5.help/1.link-not-working",{"title":139,"path":140,"stem":141},"Error Messages","/help/error-messages","5.help/2.error-messages","i-lucide-life-buoy",{"title":144,"path":145,"stem":146,"children":147},"API Reference","/api","6.api/0.index",[148,149,153,183,205,209,213,231,235,239],{"title":144,"path":145,"stem":146},{"title":150,"path":151,"stem":152},"Authentication","/api/authentication","6.api/1.authentication",{"title":154,"path":155,"stem":156,"children":157},"Shares","/api/shares","6.api/2.shares/0.index",[158,159,163,167,171,175,179],{"title":154,"path":155,"stem":156},{"title":160,"path":161,"stem":162},"Create a share","/api/shares/create","6.api/2.shares/1.create",{"title":164,"path":165,"stem":166},"List shares","/api/shares/list","6.api/2.shares/2.list",{"title":168,"path":169,"stem":170},"Retrieve a share","/api/shares/retrieve","6.api/2.shares/3.retrieve",{"title":172,"path":173,"stem":174},"Access log","/api/shares/access-log","6.api/2.shares/4.access-log",{"title":176,"path":177,"stem":178},"Expire a share","/api/shares/delete","6.api/2.shares/4.delete",{"title":180,"path":181,"stem":182},"Client-side encryption","/api/shares/client-side-encryption","6.api/2.shares/5.client-side-encryption",{"title":184,"path":185,"stem":186,"children":187},"Secure requests","/api/requests","6.api/3.requests/0.index",[188,189,193,197,201],{"title":184,"path":185,"stem":186},{"title":190,"path":191,"stem":192},"Create a request","/api/requests/create","6.api/3.requests/1.create",{"title":194,"path":195,"stem":196},"List and retrieve requests","/api/requests/list","6.api/3.requests/2.list",{"title":198,"path":199,"stem":200},"Read submissions","/api/requests/submissions","6.api/3.requests/3.submissions",{"title":202,"path":203,"stem":204},"Expire or delete a request","/api/requests/delete","6.api/3.requests/4.delete",{"title":206,"path":207,"stem":208},"Capabilities","/api/capabilities","6.api/4.capabilities",{"title":210,"path":211,"stem":212},"Stats","/api/stats","6.api/4.stats",{"title":214,"path":215,"stem":216,"children":217},"Webhooks","/api/webhooks","6.api/5.webhooks/0.index",[218,219,223,227],{"title":214,"path":215,"stem":216},{"title":220,"path":221,"stem":222},"Event reference","/api/webhooks/events","6.api/5.webhooks/1.events",{"title":224,"path":225,"stem":226},"Verifying signatures","/api/webhooks/verifying-signatures","6.api/5.webhooks/2.verifying-signatures",{"title":228,"path":229,"stem":230},"Delivery and retries","/api/webhooks/delivery-and-retries","6.api/5.webhooks/3.delivery-and-retries",{"title":232,"path":233,"stem":234},"MCP server","/api/mcp","6.api/6.mcp",{"title":236,"path":237,"stem":238},"Errors and Rate Limits","/api/errors-and-limits","6.api/7.errors-and-limits",{"title":240,"path":241,"stem":242},"Command line (CLI)","/api/cli","6.api/8.cli",{"title":244,"path":245,"stem":246,"children":247},"SDKs","/sdks","7.sdks/0.index",[248,249,253,257,261,265],{"title":244,"path":245,"stem":246},{"title":250,"path":251,"stem":252},"Node SDK","/sdks/node","7.sdks/1.node",{"title":254,"path":255,"stem":256},"Python SDK","/sdks/python","7.sdks/2.python",{"title":258,"path":259,"stem":260},"Go SDK","/sdks/go","7.sdks/3.go",{"title":262,"path":263,"stem":264},"Rust SDK","/sdks/rust","7.sdks/4.rust",{"title":266,"path":267,"stem":268},"Conformance vectors","/sdks/conformance-vectors","7.sdks/5.conformance-vectors",{"title":270,"path":271,"stem":272,"children":273,"page":25},"Security","/security","8.security",[274,278],{"title":275,"path":276,"stem":277},"Encryption","/security/encryption","8.security/1.encryption",{"title":279,"path":280,"stem":281},"Compliance","/security/compliance","8.security/2.compliance",{"id":283,"title":116,"api":284,"body":285,"description":768,"extension":769,"links":284,"meta":770,"navigation":771,"path":117,"seo":772,"stem":118,"__hash__":773},"docs/4.teams/4.custom-domains.md",null,{"type":286,"value":287,"toc":755},"minimark",[288,306,309,312,329,337,342,436,439,444,528,533,536,540,547,585,594,597,601,607,622,625,628,632,737,741],[289,290,291,292,296,297,300,301,305],"p",{},"A custom domain lets an Enterprise team send share links and secure request links on a subdomain it owns, such as ",[293,294,295],"code",{},"secure.example.com",", instead of ",[293,298,299],{},"crs.sh",". Recipients open the link on your domain and see your team's ",[302,303,304],"a",{"href":113},"custom branding",".",[289,307,308],{},"Your DNS stays with your own provider. You add one record there, and we take care of the certificate: it is issued and renewed automatically.",[289,310,311],{},"What a custom domain does not cover:",[313,314,315,319,326],"ul",{},[316,317,318],"li",{},"The app, sign-in and the paste tool stay on CredenShare's own addresses.",[316,320,321,322,325],{},"A root domain (",[293,323,324],{},"example.com",") can't be used; use a subdomain.",[316,327,328],{},"A team has one custom domain.",[289,330,331,332,336],{},"Custom domains are on the ",[333,334,335],"strong",{},"Enterprise"," plan. On other plans the settings page shows an Enterprise note instead.",[338,339,341],"h2",{"id":340},"set-it-up","Set it up",[343,344,345,356,369,410,417],"ol",{},[316,346,347,348,351,352,355],{},"Go to ",[333,349,350],{},"My Teams",", open the team, and select ",[333,353,354],{},"Custom domain",". Only the team's owner and admins see it.",[316,357,358,359,362,363,365,366,305],{},"Under ",[333,360,361],{},"Your subdomain",", enter the subdomain, for example ",[293,364,295],{},", and select ",[333,367,368],{},"Add domain",[316,370,371,372],{},"The page shows the record to add. Each value has a copy button:",[373,374,375,391],"table",{},[376,377,378],"thead",{},[379,380,381,385,388],"tr",{},[382,383,384],"th",{},"Type",[382,386,387],{},"Name",[382,389,390],{},"Value",[392,393,394],"tbody",{},[379,395,396,400,405],{},[397,398,399],"td",{},"CNAME",[397,401,402,403],{},"your subdomain, e.g. ",[293,404,295],{},[397,406,407],{},[293,408,409],{},"domains.crs.sh",[316,411,412,413,416],{},"Add the record at your DNS provider. Some providers want only the first part of the name (",[293,414,415],{},"secure",") and add your domain themselves.",[316,418,419,420,423,424,427,428,431,432,435],{},"Wait for the page to move through its three steps: ",[333,421,422],{},"Waiting for DNS",", ",[333,425,426],{},"Issuing certificate",", then ",[333,429,430],{},"Live",". It checks again on its own; ",[333,433,434],{},"Check again"," checks right away.",[289,437,438],{},"DNS changes can take a while to spread, so the first step may take a few minutes or longer, depending on your provider.",[440,441,443],"h3",{"id":442},"at-common-dns-providers","At common DNS providers",[373,445,446,459],{},[376,447,448],{},[379,449,450,453,456],{},[382,451,452],{},"Provider",[382,454,455],{},"Name to enter",[382,457,458],{},"Watch out for",[392,460,461,481,496,510],{},[379,462,463,466,470],{},[397,464,465],{},"Cloudflare",[397,467,468],{},[293,469,415],{},[397,471,472,473,476,477,480],{},"Set ",[333,474,475],{},"Proxy status"," to ",[333,478,479],{},"DNS only"," (grey cloud). A proxied record can't be used.",[379,482,483,486,491],{},[397,484,485],{},"Amazon Route 53",[397,487,488,490],{},[293,489,415],{}," (the console adds your domain)",[397,492,493,494,305],{},"Choose record type ",[333,495,399],{},[379,497,498,501,508],{},[397,499,500],{},"GoDaddy",[397,502,503,505,506],{},[293,504,415],{}," in ",[333,507,387],{},[397,509],{},[379,511,512,515,522],{},[397,513,514],{},"Namecheap",[397,516,517,505,519],{},[293,518,415],{},[333,520,521],{},"Host",[397,523,524,525,305],{},"Choose ",[333,526,527],{},"CNAME Record",[289,529,530,531,305],{},"Elsewhere, look for a \"CNAME\" record type. If the provider shows your domain next to the name field, enter only ",[293,532,415],{},[289,534,535],{},"A CNAME can't share its name with other records at most providers, so choose a subdomain that is not already in use.",[338,537,539],{"id":538},"use-it-for-new-links","Use it for new links",[289,541,542,543,546],{},"Once the domain is live, ",[333,544,545],{},"Use for new links"," is on. New share and request links from the team then use your domain:",[313,548,549,552,569,575],{},[316,550,551],{},"in the app;",[316,553,554,555,560,561,564,565,568],{},"through the API: ",[302,556,557],{"href":207},[293,558,559],{},"GET /v1/capabilities"," returns it as ",[293,562,563],{},"link_origin"," for a team key (",[293,566,567],{},"null"," when the team has none);",[316,570,571,572,574],{},"in the secure request links the ",[302,573,232],{"href":233}," creates for a team key;",[316,576,577,578,581,582,584],{},"in the ",[302,579,580],{"href":241},"command-line tool"," from version 0.4.0, and the ",[302,583,244],{"href":245}," from 0.5.0, with a team key. Each of them can be pointed at another origin instead.",[289,586,587,588,590,591,593],{},"Links you have already sent keep their address. Turning ",[333,589,545],{}," off sends new links back to ",[293,592,299],{}," without removing the domain.",[289,595,596],{},"Your domain opens only your team's shares and requests. Any other link opened on it looks like a link that doesn't exist.",[338,598,600],{"id":599},"remove-it","Remove it",[289,602,603,606],{},[333,604,605],{},"Remove domain"," asks you to confirm.",[313,608,609,619],{},[316,610,611,612,615,616,618],{},"If the domain was live, links already sent on it keep working for ",[333,613,614],{},"30 days",": they redirect to ",[293,617,299],{},", and the link still opens. After 30 days, links on the domain stop working.",[316,620,621],{},"If it never went live, it is removed right away.",[289,623,624],{},"You can then delete the CNAME record at your provider.",[289,626,627],{},"The same happens if the team leaves the Enterprise plan or is deleted.",[338,629,631],{"id":630},"troubleshooting","Troubleshooting",[373,633,634,647],{},[376,635,636],{},[379,637,638,641,644],{},[382,639,640],{},"What you see",[382,642,643],{},"Why",[382,645,646],{},"What to do",[392,648,649,662,675,689,711,722],{},[379,650,651,654,657],{},[397,652,653],{},"Waiting for DNS: \"We can't find a DNS record for … yet\"",[397,655,656],{},"The record isn't there yet, or hasn't spread",[397,658,659,660],{},"Add the CNAME, wait, then select ",[333,661,434],{},[379,663,664,667,670],{},[397,665,666],{},"\"… points to … Change its CNAME to domains.crs.sh.\"",[397,668,669],{},"The CNAME points somewhere else",[397,671,672,673],{},"Change its value to ",[293,674,409],{},[379,676,677,680,683],{},[397,678,679],{},"\"… has a record, but not a CNAME to domains.crs.sh. If it's proxied through Cloudflare, set it to DNS only.\"",[397,681,682],{},"The record is proxied (orange cloud), or it is an A record",[397,684,685,686,688],{},"Make it a CNAME, and set it to ",[333,687,479],{}," on Cloudflare",[379,690,691,694,697],{},[397,692,693],{},"Needs attention: \"The certificate … could not be issued or renewed …\"",[397,695,696],{},"A CAA record on your domain doesn't allow our certificate authorities",[397,698,699,700,423,703,706,707,710],{},"Add CAA records allowing ",[293,701,702],{},"letsencrypt.org",[293,704,705],{},"pki.goog"," and ",[293,708,709],{},"ssl.com",", or remove the CAA records that block them",[379,712,713,716,719],{},[397,714,715],{},"Needs attention: \"The CNAME … no longer points to domains.crs.sh …\"",[397,717,718],{},"The record was changed or deleted after the domain went live",[397,720,721],{},"Put the record back; the domain goes live again",[379,723,724,727,730],{},[397,725,726],{},"\"This domain is already in use\"",[397,728,729],{},"Another team has it, or it is still in its 30 days after removal",[397,731,732,733],{},"If it is yours, ",[302,734,736],{"href":735},"mailto:support@credenshare.io","contact support",[338,738,740],{"id":739},"related","Related",[313,742,743,749],{},[316,744,745,748],{},[302,746,747],{"href":113},"Custom branding",": the logo, colours and copy recipients see",[316,750,751,754],{},[302,752,753],{"href":101},"Teams and contexts",": which links belong to a team",{"title":756,"searchDepth":757,"depth":758,"links":759},"",1,2,[760,764,765,766,767],{"id":340,"depth":758,"text":341,"children":761},[762],{"id":442,"depth":763,"text":443},3,{"id":538,"depth":758,"text":539},{"id":599,"depth":758,"text":600},{"id":630,"depth":758,"text":631},{"id":739,"depth":758,"text":740},"Serve your team's share and request links on your own subdomain, such as secure.example.com, with your branding. Enterprise only.","md",{},true,{"title":116,"description":768},"ot1mRWhBzcyxbooRGz_Tym8yKD0bM-qPnLImhADajkE",[775,777],{"title":112,"path":113,"stem":114,"description":776,"children":-1},"White-label the share view your recipients open — logo, favicon, colours and panel copy — and what stays CredenShare.",{"title":120,"path":121,"stem":122,"description":778,"children":-1},"The owner-set inactivity timeout, two-factor requirement and sharing policy, IP access restrictions, access-log retention per plan, what the access trail records, and why no role can read another member's history.",1793140194130]