Proton Mail
Encrypted email with custom domains.
SPF Include
Add this include to your SPF record to authorize Proton Mail to send emails on behalf of your domain.
Add to SPF recordAlready have an SPF record? A domain can only have one: add this include to the existing record instead of creating a second one. How to merge multiple SPF records
DKIM Selector
Use this selector to verify your DKIM configuration for Proton Mail.
Verify DKIM recordSetup Steps
- 1In Proton Mail, go to Settings > Domain names and click Add domain
- 2Click Review next to your domain to see the MX, SPF, DKIM and DMARC tabs
- 3MX: mail.protonmail.ch with priority 10 and mailsec.protonmail.ch with priority 20
- 4SPF: a TXT record at the root of your domain with v=spf1 include:_spf.protonmail.ch mx ~all
- 5DKIM: three CNAME records at protonmail._domainkey, protonmail2._domainkey and protonmail3._domainkey, with the values from the DKIM tab
- 6DMARC: a TXT record at _dmarc with the value from the DMARC tab. Proton recommends p=quarantine for most domains
Last step: add a rua address to your DMARC record. With it, you get a daily report of every message sent as your domain, including the ones from Proton Mail.
Create it with the free DMARC record generatorFrequently Asked Questions
Why does Proton Mail ask for three DKIM records?
Proton asks you to add and keep three CNAME records. It generates a new 2048-bit key every six months to sign your emails.
I already have an SPF record. What do I change for Proton Mail?
Keep your record and add include:_spf.protonmail.ch to it, right after v=spf1.
Do I need a paid plan to use my domain with Proton Mail?
Yes. Custom domains need a paid Proton plan. All paid plans support them.
Where is your DNS?
How to add these records in the dashboard of your DNS provider:
Monitor your email authentication
Verify your Proton Mail configuration is correct and get alerts when issues arise.
Monitor 1 Domain Free - No Credit Card