White-label domain (if your plan allows it)

Result

Your app opens on your own subdomain with a padlock, or you have in writing why you don't need it yet and when you'll review that.

Estimated time

35 minutes

Cost

US$ 0. The white-label domain comes with Unlimited and Agency Pro, the certificate is automatic, and this lesson uses no wallet balance.

Analogy

Step-by-step guide

Menu paths are shown as they appear in the English interface. If your team works with the account in Spanish, the Spanish names are in parentheses; HighLevel leaves some labels in English.

1. 01

   Decide with your plan and who signs in

   Settings → Billing → SubscriptionsCopy path

   In a Spanish-language account: Configuración → Facturación → Subscriptions

   From Agency View, open Settings → Billing. On the Subscriptions tab, your plan card shows its name and price, like Agency Pro Account and $497 per month.

   Count who signs in to your account besides you and your team: clients with their own login, now or in the coming months. That tells you which of the two AXIS routes is yours.

   Route A · you set it up: your plan is Unlimited or Agency Pro, and at least one client signs in, or will, with their own login. Go on to step 2.

   Route B · decision recorded: your plan is Starter, or only you and your team sign in. On Starter, go straight to step 6. On Unlimited or Agency Pro, do step 5 first: whoever fills in your forms or books with you does see your links.

   If a video tells you that you need white label, come back to this rule. A sign matters when someone from outside comes to your door.

   Key points

   • The white-label domain is the address where you and your clients sign in: app.albastudio.com instead of app.gohighlevel.com. It changes the entrance and the web app's address; inside, the building is the same.
   • On HighLevel's pricing page, checked on 12 Oct 2026, Starter costs US$ 97 a month, Unlimited US$ 297 and Agency Pro US$ 497.
   • HighLevel advertises a branded app with custom domains on Unlimited, and mentions no white label on Starter. None of its pages says in so many words that Starter can't.
   • So, on Starter, check your own Settings → Company tab: if White Label isn't there, that's your answer. If it's there and lets you type in White Label Domain, note it and ask AXIS Tutor before you pick a route.
   • HighLevel presents Starter as a plan for single business owners and agencies just getting started. If nobody from outside signs in, upgrading to Unlimited just for the sign costs US$ 200 more a month, and nobody would see it.
   • Two agency features require it: single sign-on (SSO), which also needs Agency Pro, and the option to sign in with Google on your domain. If you won't use them, they don't count toward the decision.
   • In a Spanish-language account, the path is «Configuración → Facturación», and its tabs stay in English.

   Source: F1, F3, F4, F5, F6, F7, F20, F21

   1 · Is your plan Starter?Yes → Route B · No (Unlimited or Agency Pro) → question 2

   2 · Does any client sign in, or will they, with their own login?

   No

   Route B · Record your decisionPlan, who signs in from outside, decision and when you’ll review it; on Unlimited or Agency Pro, decide the API domain first (step 5)

   Yes

   Route A

   CNAME for app in your DNS (gray cloud on Cloudflare)

   Subdomain in White Label Domain

   Wait for the padlock

   Logo, Policies and the API domain decision

   Upgrading just for the sign: US$ 200 more a month from Starter to Unlimited (prices as of 12 Oct 2026)

   Settings → Billing → Subscriptions

2. 02

   Route A · Find the sign in your agency

   Settings → Company → White LabelCopy path

   In a Spanish-language account: Configuración → Empresa → White Label

   From Agency View, open Settings → Company and go to the White Label tab.

   At the top is the White Label block, with your brand's logo and details. Below it, the Domains block has two fields: White Label Domain and API Domain.

   Today you use White Label Domain. API Domain is the sign for your links, and you'll see it in step 5.

   Check whether the screen shows the record's target next to the field. If it does, write it down exactly.

   Don't save anything yet. HighLevel asks you to create the DNS record first.

   Key points

   • It's an agency-only setting. A sub-account user can't see or change it, even an Admin.
   • The tab says you can create up to two brands. That's Multi-Brands, on Agency Pro only: each brand gets its own domain, and the second can't be created without the first one's. It only helps if you run two agency brands.
   • Don't confuse it with the two apps. The installable desktop app is built on another screen, and HighLevel says it's configured separately.
   • The mobile app doesn't change either: if your clients sign in from their phones, they use the free LeadConnector app. An app with your brand is a US$ 497-a-month add-on, per the pricing page on 12 Oct 2026.

   Source: F1, F3, F8, F18, F19, F22, F23

3. 03

   Route A · Create the app record in your DNS

   Open the DNS panel where your nameservers live, the one you wrote on your domain record sheet in I.3.1.

   Create a CNAME record. In the name, type only app: your provider adds the domain.

   The target is whatever HighLevel indicates. If your screen doesn't show it, use the one from its current help article: on 12 Oct 2026 it was whitelabel.ludicrous.cloud.

   Leave the TTL as it comes.

   If you use Cloudflare, set it to DNS only, with the gray cloud, as in mission 5.

   Before saving, look up app on your domain record sheet and in Dig. If it already answers with something you use, don't delete it: pick another free subdomain, like login, and use it in every step. If it's an old record you no longer use, delete it: only that one, and only on app.

   Key points

   • Always a subdomain, never the root. A name with a CNAME can't hold any other record, and your root usually already holds your email's MX records and your website's address.
   • HighLevel also recommends a subdomain, especially if your root is already used for something else.
   • If you type the full name, the record ends up at app.albastudio.com.albastudio.com and HighLevel never finds it.
   • Cloudflare's orange cloud answers with Cloudflare's own addresses, not HighLevel's. That way, HighLevel can't issue your certificate.
   • One job per subdomain: mg is your email from mission 5 and app is only the sign. Neither gets reused for anything else.
   • Copy HighLevel's target, never a video's. HighLevel has changed targets before, and some tutorials show old values.

   Source: F1, F2, F9, F10, F11, F12, F16

   albastudio.com · the rootWhat already works: the current website and the business email (MX and SPF) · don’t touch

   mgHighLevel email · mission 5

   appSign for the app · this lesson · CNAME to HighLevel’s target

   Changes: the sign-in addressDoesn’t change: the email sender or the mobile app

   linksSign for the links · this lesson · optional

   bookYour site · I.3.3

4. 04

   Route A · Save your subdomain and wait for the padlock

   Settings → Company → White Label → White Label DomainCopy path

   In a Spanish-language account: Configuración → Empresa → White Label → White Label Domain

   Go back to the White Label tab. In White Label Domain, type your full subdomain, like app.albastudio.com.

   Save. HighLevel's help center calls the button Update or Update Company: use the one you see.

   Wait a few minutes and open https://app.albastudio.com in a private window.

   Once the certificate is issued, you see your sign-in page with the browser's padlock.

   If you see "Your connection is not private" in the browser, the certificate isn't issued yet. Don't click past the warning: check step 3 and wait.

   Check your record without signing in: in Google Admin Toolbox → Dig, look up your subdomain with the CNAME type. It should answer with HighLevel's target.

   Key points

   • HighLevel issues the certificate on its own, through Let's Encrypt, once your DNS points correctly. You don't buy one.
   • It usually takes minutes. The white-label article says up to 30 minutes, and other HighLevel articles say 24 and 48 hours. Wait 24 hours before you worry.
   • The warning also appears if app has an A record and a CNAME at the same time. Keep only the CNAME.
   • A rare case: if your domain already has a CAA record, it must allow Let's Encrypt (letsencrypt.org), the authority HighLevel names for this padlock. Also add pki.goog, the value in I.3.3, because Cloudflare generates the links padlock and HighLevel doesn't name its authority. If you have no CAA record, there's nothing to do.
   • To change subdomains later, delete the current one with the trash icon, save, type the new one and save again.
   • Don't give your address to anyone until you see the padlock.

   Source: F1, F13, F14, F16, F24, F25, F26

5. 05

   Finish the sign and decide on the one for your links

   Settings → Company → White LabelCopy path

   In a Spanish-language account: Configuración → Empresa → White Label

   In the White Label block, upload your logo. HighLevel recommends 350 × 180 pixels and under 2.5 MB.

   In Policies, put your privacy notice's address in Privacy Policy URL. If you have terms and conditions, their address goes in Terms & Conditions URL. The full privacy notice from mission 12 is your starting point.

   API Domain is the sign for your links: forms, surveys, calendars, payments, reviews and trigger links. Without it, they go out on a HighLevel domain, like your form link from mission 8, which starts with api.leadconnectorhq.com.

   If you want it, use another subdomain, like links.albastudio.com, with its own CNAME to the target HighLevel indicates. On 12 Oct 2026, its help center gave brand.ludicrous.cloud. Create it like the app record in step 3: prefix only, gray cloud on Cloudflare, and never delete a links record you already use.

   That field's Add Domain button may open a wizard that creates the record for you, if your provider supports it.

   Decide before you publish your page in lesson I.3.3. Your links may already be out there: your mission 8 form link and the links in your clients' sub-accounts. Before you set it up, write down where you shared them. Afterward, open your form's old link and note whether it still loads; if it doesn't, replace it with the new one wherever you shared it.

   Save this tab's changes. HighLevel's help center calls the button Update or Update Company: use the one you see.

   Key points

   • On Route B, only bullets 3 to 7 of this step apply to you, the API domain: don't upload a logo or type in White Label Domain.
   • app and links go on different subdomains because they point to different targets, and a name allows only one CNAME.
   • The agency's API domain applies to all your sub-accounts. HighLevel documents that a sub-account can have its own under Settings → Business Profile, which overrides the agency's. If your clients already have forms or calendars live, the change touches their links too: let them know first.
   • It doesn't go on the root either: HighLevel warns that there, your domain would stop pointing to your website.
   • HighLevel doesn't document whether links you've already shared keep working after the change. That's why AXIS recommends deciding before you hand them out.
   • HighLevel blocks a subdomain another product already uses, like your site or a funnel. So links can't be your site's subdomain from I.3.3. Your email subdomain from mission 5 is left out of that check, but it isn't reused either: one job per subdomain.
   • Neither sign changes the sender of your emails. Your email goes out from mg.albastudio.com, from mission 5, and you finish it in I.3.4.
   • HighLevel says branded links get flagged as spam less often. That's its claim, not a guarantee of reaching the inbox.

   Source: F1, F2, F9, F14, F15, F16, F17

6. 06

   Record what you did or what you decided

   Route A: on your domain record sheet from I.3.1, fill in the app row. If you set up links, fill in its row too: type, target, date and purpose.

   Route A: take your two screenshots, White Label with your subdomain saved and the sign-in page with the padlock.

   Route B: write your decision in one line, with your plan, who signs in from outside and when you'll review it. On Unlimited or Agency Pro, also note whether you set an API domain.

   For example: «No white-label domain. Starter plan, single business, no client with their own login. I'll review it when the first one gets one».

   Route B: take your screenshot of Settings → Billing → Subscriptions with your plan and your payment details covered.

   Key points

   • Recording the decision counts as completing the lesson. Skipping the sign is a valid decision when nobody from outside comes to your door.
   • Review your decision when something changes: your first client with a login, a plan change or your quarterly access review from I.2.3.
   • Your registrar account is another key to the building: it gets two-factor authentication and a line in your access register.
   • Whoever touches your DNS to create app or links goes in that register too, with the date.

   Source: F1, F4, F5

Interactive

Sign or decision?

This interactive is used inside your AXIS account.

If it breaks

The mistakes that repeat most, and the way out.