Blog

How to set up a custom domain for your short links

Two DNS records, one verification, and links on links.yourbrand.com. What to choose as the subdomain, why not the root, and what happens if you leave.

By Wasim Idrishi · Updated · 4 min read

The difference between gc.mw/spring and go.yourbrand.com/spring is not aesthetic. It is that the second one cannot be created by anybody else, which is the only property that makes a short link meaningfully more trustworthy than another short link.

Setting it up is two DNS records and one check. Custom domains are included on Business and Team — three of them — and can be added to Pro as an add-on; the hard ceiling per workspace is 50.

Before you touch DNS: choose the name once

The subdomain becomes part of every link you will ever print, so this is the decision to be slow about.

Keep it short — every character is a character you pay for in an SMS and in QR modules. go. and l. are the shortest useful options; links. is clearer and three characters longer. Keep it boring: a subdomain that reads like an authentication page attracts exactly the wrong kind of attention from filters and from readers.

And keep it separate from anything else. A subdomain that also serves a marketing site or a staging environment cannot be pointed at a redirect service, because it can only have one CNAME.

The two records

  1. Add the domain in the dashboard

    Domains, then Add. Enter the full host — go.yourbrand.com, not yourbrand.com. A verification token is generated and shown once, so copy it before you close the panel.

  2. Publish a CNAME

    Name go (or whatever you chose), value cname.gc.mw. That is the record that makes clicks arrive at our servers instead of yours.

  3. Publish a TXT record

    Name _gc-verify.go.yourbrand.com, value gc-verify= followed by the token. This proves the domain is yours and stops anyone else pointing a CNAME at us and claiming your name.

  4. Verify

    Press Verify Now, or wait — the check repeats every five minutes on its own. Both records are looked up in parallel; when both pass, the domain goes active, the certificate is issued and new links can use it.

Where verification usually fails

What the check saysWhat actually happened
CNAME points to something elseAnother service still owns the record, or a proxy is in front of it
TXT record not foundThe record was added at the wrong name — it needs the _gc-verify. prefix on the full host
TXT record does not contain the current tokenThe domain was removed and re-added, which rotates the token
Nothing at all resolvesDNS has not propagated yet; give it an hour before assuming anything is wrong
The four failures we see most, and what they mean

The name of the TXT record is the single most common mistake. Many DNS interfaces append the zone for you, so typing the full _gc-verify.go.yourbrand.com produces _gc-verify.go.yourbrand.com.yourbrand.com. Type only _gc-verify.go in hosts that behave that way, and check what the panel shows after saving.

What changes once it is live

Everything a gc.mw link does works on your domain: aliases, UTM parameters, expiry, passwords, targeting rules, QR codes and analytics. Codes are unique per domain, so go.yourbrand.com/sale and gc.mw/sale are two different links owned by two different people, and your namespace is entirely yours — no more discovering that the word you wanted was taken in 2019.

You also choose what the bare subdomain does when somebody types it with no code: redirect to a URL you set, show a bio page, or leave it as the default claim page. A code that does not exist returns HTTP 404 rather than redirecting anywhere, which is the behaviour you want the first time somebody mistypes a code from a poster.

The part to check before you commit

Ask what happens when you leave. The reason to use your own domain is that the links keep working if the service does not, and that only holds if you can get the data out.

Export every link with its destination as CSV or over the API, keep a copy with your other records, and confirm the DNS records are ones you can re-point at another provider in an afternoon. A custom domain plus an export is the difference between a shortener being a tool and a shortener being a hostage situation.

Questions people ask

Which subdomain should I use?

Short and obvious beats clever. go, link, links and l are the common four; pick one and never change it, because the subdomain becomes part of every link you print. Avoid anything that reads like a login page — secure, account, verify — since those are the words phishing uses and some filters weight them.

Can I use my root domain instead of a subdomain?

Technically sometimes, practically no. A CNAME at the apex conflicts with the MX and A records your email and website need, and DNS hosts that offer flattening handle it inconsistently. If you want a very short root domain for links, register a separate one for the purpose.

How long does verification take?

As long as your DNS host takes to publish the records, which is usually minutes and occasionally hours. Both records are checked in parallel each time, and the check repeats automatically every five minutes until it passes, so you do not have to sit and press the button.

Do I have to move my TLS certificate?

No. Once DNS verifies, the certificate is issued and renewed for you. Nothing runs on your servers — your DNS points the subdomain at us, we terminate TLS, look up the code and redirect.

What happens to my links if I remove the domain?

They are paused, not deleted, and you are told how many were affected. Reconnect the same domain or another one and re-enable them. Links are never silently moved back to gc.mw, because a link that quietly changes host is a link you can no longer explain to whoever printed it.

Try it with your own link

Paste a long link and get a 10-character gc.mw link with a QR code. No account needed for 30 days; free forever with one.