Custom domain at Timeweb

A guide for those whose domain records (DNS) are managed at Timeweb. The general order of connecting is in Custom domain; here is only what differs in the Timeweb panel. Always take the records and their values from the connection wizard: it shows exactly what your address needs, with copy buttons.

Where to edit records at Timeweb#

How to tell your domain’s DNS is at Timeweb: on the first step the wizard names the provider by the domain’s DNS servers (NS). At Timeweb they look like ns1.timeweb.ru, ns2.timeweb.ru. If the wizard named another provider, add the records there — even if you bought the domain at Timeweb.

Sign in to your Timeweb account.
Go to: Domains and SSL (Домены и SSL) → My domains (Мои домены) → your domain → “DNS editor” tab (Редактор DNS) → subdomain.
A new record is created with the «Добавить запись» (Add record) button.
Changes are saved with the «Сохранить» (Save) button.

In the record name (usually “Name” or “Host”) field you usually type only the left part (www). The panel’s documentation does not say for sure — so look at the record after saving: if it turned into www.example.com.example.com, delete it and enter the full name with a dot at the end (www.example.com.).

The root of the domain (example.com itself, without a subdomain) is written as @, an empty field or the full name depending on the panel — check the hint next to the field.

Copy the value with the button in the wizard, exactly as shown. If after saving the panel appended your domain to it (….example.com), add a dot at the end of the value.

Ownership record#

The ownership record proves that the address is being connected by its owner — without it the domain is not reserved for your account. Often there is no separate record: for a subdomain the CNAME record itself (its value starts with the request code) or the certificate record can be the proof — the wizard shows which way applies to you. When it shows a separate ownership record, it is a TXT:

_cenaly-verify.www   TXT   cenaly-verify=<code from the wizard>

Create a record of type TXT.
Name — as in the wizard (_cenaly-verify + your subdomain); the naming rule is above.
Paste the whole value, including cenaly-verify=, without quotes.

Once the domain works, the ownership TXT can be deleted: it is only checked before activation. More — Custom domain → ownership record.

In the “DNS editor” pick the subdomain in the list (or create it).
Delete old A, AAAA records and forwarding (if any) on this same name — a CNAME cannot live with other records on the same name. Do not touch records of other names (root, mail, MX).
Create a record of type CNAME.
Name: the left part of the address, for example www (the rule is in the section above).
Value: the address from the wizard, via the “Copy” button.
TTL can stay at the default (600 s).
Save («Сохранить» (Save)).

Right after saving go back to the wizard — it checks the record at the provider’s DNS servers itself and tells you if the name got an extra domain or the value points elsewhere.

Root domain without www#

Timeweb has no ALIAS/ANAME record for the root of the domain, and a plain CNAME on the root is forbidden by the DNS standard. So the wizard suggests www.example.com as the main address — connect it as a subdomain (section above) and set up forwarding from example.com itself to www. How — Root domain and www.

Certificate record#

The secure connection (HTTPS) turns on by itself: the certificate is issued and renewed for free. For this the wizard sometimes asks for one more record — the certificate authority needs it:

_acme-challenge.www of type CNAME — to an address like ….cm.yandexcloud.net (Russian side);
_cf-challenge of type TXT — for the root of the domain (international side).

They are created like the other records: name by the rule above, value via the button in the wizard. If the name _acme-challenge already has records of a previous service (another hosting with a Let’s Encrypt certificate), delete them — otherwise the certificate is not issued. Do not delete these records after connecting: the certificate is renewed through them.

How long to wait#

Timeweb’s documentation does not say how fast it publishes changes — usually minutes. The wizard checks the record right at the provider’s DNS servers, so it tells “the record is still spreading” from “the record is wrong” and in the first case shows an approximate waiting time. You can close the window — the connection continues on its own, and we will write when the site works.

If you changed an existing record, the old value may stay in caches for as long as its TTL was (often 1 hour, sometimes a day). This is not an error — the wizard shows “all correct, waiting”.

If a site already opens at the address#

If another site works at this address now, after changing the record visitors will start getting the new one. Before replacing the record at Timeweb, prepare the move: If the domain already has a site. Do not want to touch the old site — connect a separate subdomain, for example menu.example.com or shop.example.com.

Email on the domain#

The domain’s email lives in MX, TXT (SPF, DKIM, DMARC) records and sometimes in a separate mail subdomain. Connecting the site does not touch them — do not delete or change them at Timeweb. Only delete records on the name you are connecting, and only if the wizard pointed at them. More — Custom domain and email.

If the wizard shows an error#

Every wizard message leads to its own section of the errors page. The most common ones at Timeweb:

RECORD_NAME_DOUBLED — the name was saved with the domain twice
CNAME_CONFLICT_A — an old A record is left on the same name
TRAFFIC_TARGET_MISMATCH — the record points elsewhere
PROPAGATING — all correct, the record is still spreading
APEX_ALIAS_UNSUPPORTED — root without ALIAS — www is needed

How to disconnect and what to delete#

Disconnect the domain in the wizard (“Disconnect domain”), then delete at Timeweb the records it lists: the site record (CNAME or ALIAS) and, if any, the ownership and certificate records. Leave email and other records alone. While the site record points to us, the address stays reserved for your account — this protects it from being taken over by another account. The wizard checks the removal with the “Check removal” button. More — Disconnecting a custom domain.

Timeweb specifics#

In the “DNS editor” a record is created for the selected subdomain: first pick the subdomain (or the main domain) from the list, then “Add record”.
CNAME is only for subdomains (including www); a subdomain that has other records cannot get a CNAME — delete them first.
Cyrillic domains in values are written in punycode (xn--…), not “домен.рф”.
The default TTL is 600 seconds.
Timeweb Cloud (timeweb.cloud) uses the same NS but its own panel; if the records are not in the hosting “DNS editor”, open the “Domains” section of Timeweb Cloud.

Sources#

This guide is based on Timeweb’s documentation, checked 2026-11-06. Panels change — if a button or field is labelled differently for you, follow the meaning of the step, and the wizard will tell you if the record came out wrong.