DNS guides for common providers
Every provider asks for the same things: a type (MX, TXT, CNAME), a name (or host), a value (or content, target, points to) and, for MX, a priority. Take the values from your domain's DNS list in the team manager or admin panel (each has Copy), then come back and choose Check DNS to see each one turn green. Menus move now and then; the names below are the ones the providers used when this was written.
Before you start, delete any MX records, SPF records (TXT starting v=spf1) and DMARC records (TXT at _dmarc) left from an earlier mail provider: a domain must have one SPF and one DMARC record, and old MX records send some mail elsewhere.
How each provider writes names
The DNS list shows full names, such as _dmarc.example.com. Most providers want only the part before your domain:
| You see | Type in the name field |
|---|---|
example.com (the domain itself) | @ (or leave it empty, where the provider says so) |
_dmarc.example.com | _dmarc |
zappo1._domainkey.example.com | zappo1._domainkey |
mta-sts.example.com | mta-sts |
AWS Route53 and Google Cloud DNS are the exceptions: they show the domain after the field, so type the same short part and they add the rest.
AWS Route53
- Route 53 → Hosted zones → your domain → Create record.
- Record name: the short part (empty for the domain itself); Record type: MX, TXT or CNAME.
- Value: for MX, priority and host on one line (
10 mail.example.net.); for TXT, the value with its quotes, as the Copy button gives it (a DKIM key is two quoted strings on one line; Route53 refuses one long unquoted string). - Create records. Or import everything at once: Import zone file with the downloaded zone file (see Set up DNS).
Cloudflare
- Websites → your domain → DNS → Records → Add record.
- Choose the type, put the short name in Name, the value in Content (for MX, the host, and the priority in Priority).
- For CNAME records (
mta-sts,autoconfig,openpgpkey...), switch Proxy status to DNS only (grey cloud): proxied, the certificate checks and mail-app setup fail. - DKIM: either form works; Cloudflare splits a long value itself.
- Or Import and Export → Import DNS records with the zone file.
GoDaddy
- My Products → your domain → DNS → Add New Record.
- Type, Name (
@for the domain itself), Value; for MX also Priority. Leave TTL at the default (1 hour). - DKIM: paste Copy single line; GoDaddy splits it.
- GoDaddy adds its own MX and SPF records for its email when you buy the domain: delete those first.
Namecheap
- Domain List → Manage → your domain → Advanced DNS.
- MX records live under Mail Settings: choose Custom MX, then add each MX with host
@, the mail server and its priority. - Host Records → Add New Record for TXT and CNAME records: Host is the short name (
@,_dmarc,mta-sts...), Value the value. - DKIM: Copy single line.
- Namecheap's free email forwarding conflicts with your own MX: turn it off.
Squarespace (formerly Google Domains)
- Domains → your domain → DNS → DNS Settings → Add record under Custom records.
- Host is the short name (
@for the domain itself), then Type, Priority for MX, and Data for the value. - Remove any Google Workspace preset first if you used it: it holds MX and SPF records.
- DKIM: Copy single line.
Porkbun
- Domain Management → your domain → DNS.
- Type, Host (leave empty for the domain itself; otherwise the short name), Answer (the value), Priority for MX.
- Porkbun's email forwarding adds MX records: delete them.
- DKIM: Copy single line.
OVHcloud
- Web Cloud → Domain names → your domain → DNS zone → Add an entry.
- Pick the type (MX, TXT, CNAME), type the Sub-domain (empty for the domain itself), the Target, and for MX the Priority.
- OVH puts its own MX and SPF records in new zones: delete them first.
- CNAME targets need the final dot in OVH's form (
mail.example.net.).
Hetzner DNS
- dns.hetzner.com → your zone → Add record.
- Type, Name (
@for the domain itself), Value, TTL. - For MX the value is
10 mail.example.net.(priority, then host with a final dot). - Or Import records with the zone file.
DigitalOcean
- Networking → Domains → your domain.
- Choose the record tab (MX, TXT, CNAME), Hostname (
@for the domain itself) and the value; MX asks for Priority. - DKIM: Copy single line; DigitalOcean splits it.
After adding them
Choose Check DNS on the domain's page. New records can take from a minute to a few hours to show, depending on the TTL of what was there before. When the ownership record is in, choose Verify for a domain added without proof. See Set up DNS for what each record does.