diff --git a/packages/console/src/pages/ApplicationDetails/ApplicationDetailsContent/ProtectedAppSettings/index.tsx b/packages/console/src/pages/ApplicationDetails/ApplicationDetailsContent/ProtectedAppSettings/index.tsx
index 3637ef6ff..bc3ba743e 100644
--- a/packages/console/src/pages/ApplicationDetails/ApplicationDetailsContent/ProtectedAppSettings/index.tsx
+++ b/packages/console/src/pages/ApplicationDetails/ApplicationDetailsContent/ProtectedAppSettings/index.tsx
@@ -3,6 +3,7 @@ import {
   type Application,
   type CustomDomain as CustomDomainType,
 } from '@logto/schemas';
+import { cond } from '@silverhand/essentials';
 import { type ChangeEvent } from 'react';
 import { Controller, useFieldArray, useFormContext } from 'react-hook-form';
 import { Trans, useTranslation } from 'react-i18next';
@@ -45,6 +46,7 @@ function ProtectedAppSettings({ data }: Props) {
   const {
     control,
     register,
+    getFieldState,
     formState: { errors },
   } = useFormContext<ApplicationForm>();
 
@@ -146,6 +148,10 @@ function ProtectedAppSettings({ data }: Props) {
         <FormField
           isRequired
           title="protected_app.form.url_field_label"
+          description={cond(
+            getFieldState('protectedAppMetadata.origin').isDirty &&
+              'protected_app.form.url_field_modification_notice'
+          )}
           tip={<span className={styles.tip}>{t('application_details.origin_url_tip')}</span>}
         >
           <TextInput
diff --git a/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/de/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts
index 51cb1e0b1..0801eb283 100644
--- a/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/en/translation/admin-console/protected-app.ts
@@ -18,6 +18,8 @@ const protected_app = {
     url_field_label: 'Origin URL',
     url_field_placeholder: 'https://',
     url_field_description: 'Enter the primary website address of your application.',
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     create_application: 'Create application',
diff --git a/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/es/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/fr/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/it/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/ja/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/ko/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/pl-pl/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/pt-br/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/pt-pt/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/ru/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/tr-tr/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/zh-cn/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/zh-hk/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */
diff --git a/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts b/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts
index 8d424e297..c4c00f32f 100644
--- a/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts
+++ b/packages/phrases/src/locales/zh-tw/translation/admin-console/protected-app.ts
@@ -33,6 +33,9 @@ const protected_app = {
     /** UNTRANSLATED */
     url_field_description: 'Enter the primary website address of your application.',
     /** UNTRANSLATED */
+    url_field_modification_notice:
+      'Modifications to the Origin URL may take up to 1-2 minutes to propagate and become effective across global network locations.',
+    /** UNTRANSLATED */
     url_field_tooltip:
       "Enter primary website address of your application, excluding any '/pathname'. After creation, you can customize route authentication rules.\n\nNote: The Origin URL itself won't require authentication; only accesses via the added app domain will be protected.",
     /** UNTRANSLATED */