---
title: Why must we use the Domain Nameservers method for Wildcard Domains on Vercel?
description: Learn why the domain Nameservers method is needed to set up a wildcard domain as custom domain.
url: /kb/guide/why-use-domain-nameservers-method-wildcard-domains
canonical_url: "https://vercel.com/kb/guide/why-use-domain-nameservers-method-wildcard-domains"
last_updated: 2025-11-10
authors: Ismael Rumzan
related:
  - /docs/concepts/projects/domains/add-a-domain
  - /docs/domains/working-with-domains
  - /docs/concepts/projects/domains
install_vercel_plugin: npx plugins add vercel/vercel-plugin
---

The Vercel platform provides the option to set up [Custom Domains](https://vercel.com/docs/concepts/projects/domains/add-a-domain), with the ability to use [Wildcard Domains](https://vercel.com/docs/domains/working-with-domains#wildcard-domain). As described [here](https://vercel.com/docs/concepts/projects/domains#subdomains,-wildcard-domains,-and-apex-domains), you must use the **Nameservers method** for verification for Wildcard Domains.

## Nameservers method

This is because Vercel needs to be able to set DNS records in order to generate the wildcard certificates. The service that Vercel uses to [generate the certificates](https://vercel.com/docs/concepts/projects/domains#ssl-certification) requires us to verify the domain ownership by using the [DNS-01 challenge method](https://letsencrypt.org/docs/challenge-types/#dns-01-challenge). By changing the nameservers, Vercel will handle the DNS-01 challenge for you automatically, and you don't need to update your verification DNS record upon your certificate renewal each time.

For non-wildcard domains, the verification is done using the [HTTP-01 challenge method](https://letsencrypt.org/docs/challenge-types/#http-01-challenge) (which Vercel also automatically handles the challenge request for you), so you don't need to use this nameservers method.