diff --git a/lofar_cryptocoryne/client.py b/lofar_cryptocoryne/client.py
index 7b57dd3935af075b403d736d65747976e677647d..1647f5d0dacd01efd99e8e7b10f97f4949db8706 100644
--- a/lofar_cryptocoryne/client.py
+++ b/lofar_cryptocoryne/client.py
@@ -38,7 +38,9 @@ class DnsClient:
         """Setup DNS TXT records to verify given domain with given tokens"""
         zone = self.desec_client.get_authoritative_domain(verify_domain)
         subname = verify_domain.rsplit(zone["name"], 1)[0].rstrip(".")
-        self.desec_client.add_record(zone["name"], "TXT", subname, [f'"{tokens[0]}"'])
+        self.desec_client.add_record(
+            zone["name"], "TXT", subname, [f'"{tokens[0]}"'], 3600
+        )
         self.cleanups.append(
             lambda d=zone["name"], sn=subname: self.desec_client.delete_record(
                 d, "TXT", sn
diff --git a/tests/test_client.py b/tests/test_client.py
index 87dbd92c617a9285a3d48f35b673badb57855833..b50de261bfdd0e077d71a12090f8147cf400998c 100644
--- a/tests/test_client.py
+++ b/tests/test_client.py
@@ -40,7 +40,7 @@ class TestDnsClient(TestCase):
             "verify.lofar.net"
         )
         desec_client_mock.add_record.assert_called_once_with(
-            "lofar.net", "TXT", "verify", ['"token"']
+            "lofar.net", "TXT", "verify", ['"token"'], 3600
         )
 
         assert len(dns_client.cleanups) == 1