Prove you own your site

A Pulse only needs you to confirm that you own the site or are allowed to test it. A Deep scan walks through up to 30 pages, so Lockpick asks for proof first. The proof is something only the site's owner can publish.

You do this once per site. Lockpick gives each site one value, and anyone in your workspace who can run scans on it uses the same one. Deep looks for it before every scan, so while it stays published you never do this again.

When you start a Deep scan on a site you haven't proven you own yet, Lockpick shows you the value and three places to put it. Pick the one that suits how your site is built.

Add a DNS record

This is the usual way. You add one TXT record where you manage your domain's DNS.

• The name is _lockpick-challenge in front of your site's address. Most DNS hosts add your domain for you, so you only type _lockpick-challenge, plus any subdomain.
• The value starts with lockpick-verification=. Copy it from Lockpick.

If Lockpick recognises where your DNS is managed, it says so and links straight to it. Step by step guides for each host are below.

• Cloudflare
• Vercel
• Netlify
• GoDaddy
• Namecheap
• Squarespace
• Wix
• Shopify
• Amazon Route 53
• Google Cloud DNS

Not listed? Sign in where you bought or manage your domain, open its DNS settings and add a TXT record with the name and value Lockpick shows you.

Add a meta tag

If you build with Lovable, Bolt, Webflow, Framer or another site builder, this is often the easiest. Paste the tag Lockpick gives you into the head section of your homepage and publish. It has to be in the page itself, not added later by a script.

Upload a file

If you can publish files on your site, upload a file instead.

Check it

Leave the sheet open once you've added the value. Lockpick looks for it by itself, often at first and then once a minute. Check now looks straight away. If you opened the sheet to run Deep, Lockpick starts that Deep scan the moment the value is there, and it uses one Deep scan from your monthly allowance. Proving ownership from a site's Settings or from onboarding never starts a scan.

• You can close the sheet. The site waits for the value, and the value stays the same the next time you open it.
• Every Deep scan looks for the value again before it starts. If it's gone, Deep stops for everyone in the workspace until you put it back.
• You approve each Deep scan before it starts.

To start over with a new value, open the site's Settings and choose Remove the proof. The old value stops counting straight away.