UnbreakMyApp / Fix guides

Custom domain or SSL not working on Lovable or Vercel

Domain stuck on "Verifying", showing an old site, or a security warning? The DNS records that usually cause it and how to fix them.

Why it happens

Your domain's DNS records tell the internet where to send visitors. If old records from a previous host are still there, if a record has a typo, or if a proxy (like Cloudflare's orange cloud) sits in front during setup, the host cannot verify your domain or issue a free SSL certificate.

For Lovable, the docs specify an A record pointing to 185.158.133.1 plus a TXT record on _lovable with a value starting lovable_verify=. Leftover AAAA (IPv6) records and restrictive CAA records are common blockers.

For Vercel, the Domains settings page shows the exact A or CNAME record for your project. Old records or proxying cause similar problems.

How to fix it, step by step

  1. Check what your domain resolves to today with a DNS lookup tool such as dnschecker.org.
  2. At your DNS provider, delete old A, AAAA and CNAME records for the host you are connecting (@ for the root, www, or your subdomain).
  3. Add exactly the records your host shows. Lovable: A → 185.158.133.1 and the _lovable TXT verification record. Vercel: the A/CNAME values shown in Project → Settings → Domains.
  4. If you use Cloudflare DNS, set those records to "DNS only" (gray cloud) unless you deliberately configured proxy mode.
  5. If you have CAA records, allow the certificate authority your host uses (Lovable lists letsencrypt.org, pki.goog and ssl.com).
  6. Wait. Most changes apply within a few hours, but propagation can take up to 72 hours. Then click Check status / Retry in your host.
  7. If login breaks on the new domain, add the domain to Supabase → Authentication → URL Configuration (Site URL and Redirect URLs).

Paste-ready prompt for Lovable

My custom domain is connected but not working. Please check my project settings and tell me:
1. Which domains are connected and their status.
2. The exact DNS records I need (type, host, value) for the root domain and www.
3. Whether the auth redirect URLs include my custom domain, and add them if not.
Then give me a short checklist of what to delete and add at my DNS provider.

FAQ

Do I need to buy an SSL certificate?

No. Both Lovable and Vercel issue free certificates automatically once DNS is correct.

Why does it show my old website?

Old A, AAAA or CNAME records are still pointing elsewhere. Remove them so only your new host's records remain.

Still broken?

Get a free diagnosis by email within 24 hours. Fixed or refunded.

Get a free diagnosis

Or join the waitlist for updates:

Sources