# Upload a file

Prove you own your site by publishing a one-line file on it, when you can't change its DNS.

When you start a Deep scan, Lockpick first asks you to prove you own the site. Choose **File on your site**, then **Show my file**.

1. Create a plain text file whose only line is the value Lockpick shows you. It starts with `lockpick-verification=`.
2. Publish it on your site at `/.well-known/lockpick-verification.txt`.
3. Open that address in your browser to make sure it shows the line, then come back to Lockpick and choose **Check now**.

The file must be served over HTTPS, at that exact address, with no redirect. If your site sends visitors from one address to another, for example from `atlas.example` to `www.atlas.example`, publish the file on the address you are proving.

> **Try it**
>
> Most site builders and hosts let you add files to a `public` or `static`
> folder, and anything in it appears at the same path on your site.
> `.well-known` is a normal folder name, the leading dot included.

Keep the file published. Every Deep scan and Deep auto-check looks for it again before it starts, and removing it stops them until it's back.