Set Up White Label Lite on Your Own Domain

White Label Lite lets you serve the TrekMail dashboard and webmail under your own domain, with your own brand name, logo, and colors. Your customers see your brand from the login screen all the way through to transactional emails — no "Powered by TrekMail" anywhere.

This guide walks you from activation through to a live branded domain, plus how cancellation works and what your customers actually see.

What it costs

• $39 / month on monthly billing.
• $389 / year on yearly billing — saves $79 a year over paying monthly.
• Comes with 30% off the Drive Storage add-on, applied automatically every renewal.
• Available on every plan — Nano, Starter, Pro, and Agency.

Other currencies (EUR, GBP, CAD, AUD, JPY, CHF, KRW, SGD, AED) are priced at the same spread used across TrekMail plans. The currency is locked once you subscribe — Stripe limitation, not ours.

Before you start

You'll need:

• A TrekMail account on any plan (Nano works — White Label Lite is $39/month on top of whichever mail plan you have).
• A domain you control and have added to TrekMail. Branding is configured per domain, and the branded URLs are subdomains of it — dashboard.yourbrand.com for the dashboard and mail.yourbrand.com for webmail.
• Ability to add DNS records at your DNS provider — Cloudflare, GoDaddy, Route 53, Namecheap, whatever you use.
• A card to charge — you can use any card already saved on your account or enter a fresh one in the activation popup.

If your domain is parked at a registrar that doesn't let you add CNAME records (some bundled-hosting providers restrict this), move DNS to a real provider first. Cloudflare and Route 53 are both free for DNS-only mode.

Activate the add-on

Open the Plans page in your dashboard and scroll to the White Label Lite card. Choose monthly or yearly billing — yearly is the default because it's the better deal — and click Activate White Label.

A payment popup opens. Pick any card already saved on your account, or choose New card to enter a fresh one — Apple Pay and Google Pay show up automatically if your device supports them. If your bank requires a 3D Secure check, the popup handles it inline (or briefly redirects you to your bank's verification page and brings you back). Activation completes within a few seconds.

After payment clears, you're sent straight to the Branding tab to enter your brand details. White Label is configured per domain — pick the domain you want to brand and open its Branding tab.

Set your brand identity

On the domain's Branding tab, start with the Branding source selector:

• Use account default — inherit your account-wide default brand.
• Custom for this domain — give this domain its own brand identity (pick this to fill in the fields below).
• Off — no branding for this domain.

With Custom for this domain selected, fill in Brand identity:

• Brand name — what your customers see in the sidebar, login screen, page titles, and email signatures. Something like "MyBrand Email" or just your brand name.
• Light logo + Dark logo — two separate uploads. The light logo is used on light backgrounds; the dark logo is used on dark backgrounds (dark mode, dark email headers). PNG or JPG, max 1 MB each. Square or near-square looks best, transparent background recommended. SVG isn't supported yet for security reasons.
• Favicon — its own separate upload (PNG, JPG, or ICO, max 1 MB) for the browser tab icon.
• Primary color + Accent color — hex codes like #3b82f6. Used for the dashboard accents, button colors, and the header border on branded emails.

Under Sender emails (optional):

• Transactional sender — the visible From address on branded transactional emails.
• Reply-to / Support email — if set, your customers' replies to transactional emails come to this address instead of bouncing off our no-reply.
• Help center URL — link to your own help desk or knowledge base. When set, every branded transactional email gets a small Need help? link in the footer pointing here. Leave it blank and the footer just shows the standard "Visit YourBrand" link.

Click Save changes. You can edit any of these later without affecting your branded URLs. Brand identity and the branded hosts are independent — change your logo at 3 AM and your domains keep serving.

For tips on logo sizing and color contrast, see White Label brand assets.

Turn on your branded URLs

On the same Branding tab, find Branded access — two independent toggles, each a separate branded host:

• Dashboard URL — serves the dashboard at dashboard.yourbrand.com.
• Webmail URL — serves webmail at mail.yourbrand.com.

Turn on whichever you want (you can enable one or both). Branded URLs go live only with the White Label add-on active; without it they save as a draft so you can configure ahead of time.

Click Save changes. The status pill for each enabled host changes to pending DNS.

Now go to your DNS provider and add a CNAME record for each branded subdomain you enabled:

• Host / Name: dashboard and/or mail (matching the toggles you turned on)
• Type: CNAME
• Value / Target: wl.trekmail.net
• TTL: automatic / 1 hour
• Proxy / Cloudflare orange cloud: OFF (DNS-only / grey cloud)

Cloudflare's orange-cloud proxy breaks our SSL provisioning — keep it grey. The same caveat applies to any provider's proxying/CDN layer.

DNS propagation usually takes 5 to 30 minutes. Once your CNAME is live globally, we issue a Let's Encrypt SSL certificate and start serving the branded host. We re-check DNS the moment you save (so most setups move to active without you doing anything else), and a weekly health check sweeps any that didn't catch the first time. If status is stuck after an hour, hit Force re-provision on the Branding tab to retry immediately.

If something looks stuck, see White Label DNS troubleshooting.

Apply your brand to other domains

The Apply changes section on the Branding tab has two toggles for rolling a brand out across your account:

• Make this the account default — new domains inherit this brand.
• Apply to all existing domains — push this brand to every domain you already have, in one click.

Leave both off if you only want to brand this single domain. For the full multi-domain picture, see Running multiple White Label brands.

Automate with the API & MCP

Everything on this page — brand name, colors, logos, the dashboard/webmail toggles, and DNS verification — can also be configured through the TrekMail REST API or MCP, so an AI agent (Claude, OpenClaw) or your own script can set up branding without touching the dashboard. An agent can even run the whole flow autonomously: set the brand, read back the exact CNAME records, write them through the Cloudflare DNS tools, then verify and poll until the host is live.

The dashboard steps above still work exactly as described — the API is just an additional way to do the same thing. See the White Label Branding API and MCP Guide for endpoints, the 7 MCP tools, and a worked end-to-end example.

Verify your live domain

Once status shows active:

• Visit https://dashboard.yourbrand.com — you should see your branded login screen and dashboard with your logo and colors.
• Visit https://mail.yourbrand.com — webmail serves from its own branded host. Your end users get there however you normally direct them.
• Existing TrekMail URLs (https://trekmail.net/app/...) continue to work. Send your customers the new branded URLs going forward.

That's it. You're live.

What your customers see

Your brand shows up everywhere it matters:

• Dashboard, sidebar, page titles — your name, your logo, your colors.
• Login screen — your brand.
• Transactional emails (password reset, mailbox setup invites) — your "from" name and Reply-To if you set Support email.
• SSL certificate — issued in your domain's name, not ours.
• No "Powered by TrekMail" footer anywhere on the customer-facing surface.

A few things stay TrekMail-branded by design:

• Billing emails — these go to you, the account owner, not your customers. We send invoices and dunning notices from noreply@trekmail.net so they land predictably in your inbox.
• Internal browser names — if a technical user opens browser developer tools, they may spot internal cookie or storage names like trekmail-…. These never appear during normal use.
• Our help center — when your customers ask you for help, they ask you, not us. You handle the support relationship.

For the full picture of what stays TrekMail-branded vs what's yours, see What stays TrekMail-branded.

Cancel White Label Lite

Open the Billing page and scroll to the White Label Lite card. Click Cancel White Label.

The add-on stays active until the end of your current billing period — you've already paid for it. After that, the domain stops serving 7 days later. The 7-day window is a grace period: you can reactivate and your brand setup comes back exactly as you left it, no re-configuration needed.

After 7 days, the SSL certificate for your domain is removed and the branded URL stops serving. Your brand setup (logo, colors, name) stays on file indefinitely so that if you ever reactivate, your settings come back as you left them — contact support if you want it fully deleted.

For full details on the grace window, refunds, and what happens to your branded URLs, see Canceling White Label Lite.

Common scenarios

"My status is still 'pending DNS' an hour after I added the CNAME." DNS propagation can take up to an hour at slow providers. Open whatsmydns.net or dnschecker.org, enter your branded subdomain, and choose CNAME from the dropdown. If you see wl.trekmail.net propagating across the world map, you're fine — sit tight, the check will catch it. If the map shows your old record or nothing, DNS hasn't applied yet at your provider. If you're comfortable in a terminal: dig CNAME dashboard.yourbrand.com should show wl.trekmail.net as the answer.

"Status says 'cert failed — blocked CAA'." A CAA record is a DNS setting that tells the world which certificate authorities are allowed to issue SSL certificates for your domain. If yours doesn't allow Let's Encrypt, we can't get you HTTPS. Fix by adding a CAA record at your apex domain that permits Let's Encrypt: yourbrand.com. IN CAA 0 issue "letsencrypt.org". Existing CAA records can stay alongside — CAA entries are additive.

"My logo looks blurry on retina screens." Upload a higher-resolution PNG — 400×400 px or larger. The dashboard renders it scaled down with height: 32px, so a larger source gives sharper results on high-DPI displays.

"Where does customer support email come from?" Transactional emails (password reset, mailbox setup notifications) default to noreply@trekmail.net with your visible brand name. Two settings tighten the loop:

• Transactional sender — set to any address on a domain you've already verified on TrekMail (e.g. noreply@yourbrand.com) and we'll use it as the visible From. We sign with your DKIM key (already provisioned for your mailboxes), SPF was already aligned, deliverability is unchanged. Full walk-through: Sending branded emails from your own domain.
• Support email — used as the Reply-To header. When your customer hits Reply, the message comes to you, not bounces off us. Leave it blank and emails behave as pure no-reply.

"Can I run two brands from one TrekMail account?" Yes — branding is per domain. Add a domain per brand and set each one's Branding source to Custom for this domain on its Branding tab. You'd only use separate TrekMail accounts when the brands need separate billing entities. See Running multiple White Label brands.

What's next

• Canceling White Label Lite — full cancellation flow, grace window, refund policy.
• White Label DNS troubleshooting — "stuck pending DNS", Cloudflare orange-cloud, CAA records, propagation timing.
• White Label brand assets — logo aspect ratios, color contrast tips.
• What stays TrekMail-branded — what your customers might still see TrekMail underneath.
• White Label Lite pricing FAQ — currencies, taxes, monthly/yearly switching, what gets prorated.
• Sending branded emails from your own domain — replace noreply@trekmail.net with noreply@yourbrand.com.
• White Label Branding API and MCP Guide — configure branding over REST or MCP for hands-off, agent-driven setup.

Need help?

Open a ticket from the Support page, or see Using the Support Center.