---
title: Why must we use the Domain Nameservers method for Wildcard Domains on Vercel?
description: Learn why the domain Nameservers method is needed to set up a wildcard domain as custom domain.
url: /kb/guide/why-use-domain-nameservers-method-wildcard-domains
canonical_url: "https://vercel.com/kb/guide/why-use-domain-nameservers-method-wildcard-domains"
published: 2025-11-03
last_updated: 2025-11-10
authors: Ismael Rumzan
related:
  - /docs/concepts/projects/domains/add-a-domain
  - /docs/domains/working-with-domains
  - /docs/concepts/projects/domains
install_vercel_plugin: npx plugins add vercel/vercel-plugin
---
<!-- docsgraph:related -->
## Related pages

> **For AI agents:** Follow these links to understand how this page connects to the rest of the Vercel ecosystem. For the full cross-link map (inbound, outbound, prerequisites, and semantic neighbors), see the .graph.md link below.

- [Troubleshooting Domains](https://vercel.com/docs/domains/troubleshooting?from=related) — Learn about common reasons for domain misconfigurations and how to troubleshoot your domain on Vercel.
- [Working with Nameservers](https://vercel.com/docs/domains/working-with-nameservers?from=related) — Learn about nameservers and the benefits Vercel nameservers provide.
- [Adding a Domain](https://vercel.com/docs/domains/working-with-domains/add-a-domain?from=related) — Learn how to add a custom domain to your Vercel project, verify it, and correctly set the DNS or Nameserver values.
- [Working with SSL](https://vercel.com/docs/domains/working-with-ssl?from=related) — Learn how Vercel uses SSL certification to keep your site secure.
- [Configuring Domains](https://vercel.com/docs/platforms/multi-tenant-platforms/configuring-domains?from=related) — Add, verify, redirect, and remove wildcard and custom domains for a multi-tenant application using the Vercel SDK.
- [Can I use wildcard domains without switching to Vercel Nameservers?](https://vercel.com/kb/guide/wildcard-domain-without-vercel-nameservers?from=related) — Information on how to use wildcard domains without Vercel Nameservers
- [Does using Vercel's Nameserver's lock you in?](https://vercel.com/kb/guide/does-using-vercel-s-nameserver-s-lock-you-in?from=related) — Learn about how using Vercel's Nameservers doesn't lock you to anything.
- [Why is my Vercel domain not verified?](https://vercel.com/kb/guide/why-is-my-vercel-domain-unverified?from=related) — Information on why a Vercel domain may not be verified and how to verify it.
- [How do I change my Nameservers on Vercel?](https://vercel.com/kb/guide/how-do-i-change-my-nameservers-on-vercel?from=related) — Learn about how to change Nameservers for domains registered with Vercel.
- [Should I use Cloudflare in front of Vercel?](https://vercel.com/kb/guide/cloudflare-with-vercel?from=related) — Information on using Cloudflare together with Vercel.

Full cross-link map for this page: [/kb/guide/why-use-domain-nameservers-method-wildcard-domains.graph.md](/kb/guide/why-use-domain-nameservers-method-wildcard-domains.graph.md)
<!-- /docsgraph:related -->


The Vercel platform provides the option to set up [Custom Domains](https://vercel.com/docs/concepts/projects/domains/add-a-domain), with the ability to use [Wildcard Domains](https://vercel.com/docs/domains/working-with-domains#wildcard-domain). As described [here](https://vercel.com/docs/concepts/projects/domains#subdomains,-wildcard-domains,-and-apex-domains), you must use the **Nameservers method** for verification for Wildcard Domains.

## Nameservers method

This is because Vercel needs to be able to set DNS records in order to generate the wildcard certificates. The service that Vercel uses to [generate the certificates](https://vercel.com/docs/concepts/projects/domains#ssl-certification) requires us to verify the domain ownership by using the [DNS-01 challenge method](https://letsencrypt.org/docs/challenge-types/#dns-01-challenge). By changing the nameservers, Vercel will handle the DNS-01 challenge for you automatically, and you don't need to update your verification DNS record upon your certificate renewal each time.

For non-wildcard domains, the verification is done using the [HTTP-01 challenge method](https://letsencrypt.org/docs/challenge-types/#http-01-challenge) (which Vercel also automatically handles the challenge request for you), so you don't need to use this nameservers method.