One CNAME record is all this takes. It serves your images from your own hostname and removes the corner note on Premium.
Domains → the domain → DNS records → Add new record.
Panel wording changes from time to time. If what you see does not match, look for anything called DNS, Advanced DNS, Zone Editor or DNS Records — they are the same thing. The documentation from Netlify is linked above and is always the authority.
| Type | CNAME |
|---|---|
| Name | img — just this, Netlify adds your domain |
| Value | img.youcansecureit.com |
| TTL | Leave the default (or 1 hour / 3600) |
Worth knowing on Netlify:
DNS changes are usually visible within a few minutes, though registrars are allowed to take up to 24–48 hours. You do not have to wait to find out — ask the internet directly:
dig +short img.yourdomain.comOn Windows, nslookup img.yourdomain.com does the same job. You are looking for
img.youcansecureit.com in the answer. Until the record has propagated you will get
nothing back, which is normal and not an error.
In WordPress, open Settings → Image Relay and enter
img.yourdomain.com. The relay checks the DNS itself, provisions the hostname and
issues an SSL certificate for it — usually live within about fifteen minutes.
From then on your images are served from your own hostname, with no corner note. If the DNS record ever disappears the relay notices within 24 hours and quietly falls back to the shared domain, so your images never break.
imgA leftover A, AAAA or CNAME record on the same name wins over the one you just added. Delete the old row rather than adding a second.
Most panels append your domain automatically, so img.yourdomain.com becomes
img.yourdomain.com.yourdomain.com. If dig shows a doubled domain,
that is the cause.
Editing DNS at your registrar does nothing if the nameservers point somewhere else — a
host, or Cloudflare. Check with dig +short NS yourdomain.com and edit wherever
that points.
Cloudflare's orange cloud, and similar “web forwarding” options elsewhere, hide the real DNS answer. The relay cannot verify the hostname and the certificate will not issue. Set the record to DNS only.
The record is identical everywhere — only the panel differs. We have step-by-step pages for thirty registrars and hosts.