Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

How to Mask Your Domain

We offer DNS masking, which allows you to show searchers (instead of Follow these steps to mask your domain. Please note that due to limitations in the size of our SSL certificate, we are only able to offer top level domain masking: i.e., but not

  1. Create a search subdomain for your domain. If search is already in use in your environment, you could use find or findit as your subdomain.

  2. Create a CNAME in your external DNS records for Point it to Your site handle is listed on the settings page in the Search Admin Center.

    For example: if your site handle is abc, the DNS record would look like this:   CNAME

    NOTE: if your site handle contains a ., please replace it with a - in your DNS record, e.g., for site handle the DNS record would look like this:   CNAME
  3. After your DNS record has been added, email us to request to be added to our SSL certificate. If your CNAME is not on our SSL certificate, browser security warnings will appear when your search results page attemps to load over HTTPS. It generally takes a few days for these requests to get through our queue.

    Your domain mask will work as soon as these two steps are complete.

  4. When your DNS record is in place and you have received confirmation that your domain mask has been added to our SSL certificate, change your search box’s form code action from to

Troubleshooting tip: Many agencies have both internal and external DNS. Be sure to update your external DNS records (step 1) before changing your form code (step 2).

Pro Tips

  • Any search site within your domain may use the same domain mask and CNAME record, even if the CNAME is not associated with that particular site’s handle. To implement an existing mask for a search box, just do Step 2, above.
  • Once the CNAME is set up, if visitors to your site happen to truncate the URL in the browser bar to (without any parameters), they’re automatically redirected to your agency’s homepage at
  • Most of our customers use a mask (such as If the search subdomain is already used by another application, you can use find or findit, such as or We no longer support other subdomain patterns.