sendingkit
Join with GoogleStart for free
Guides · Cloudflare

How to configure email authentication on Cloudflare DNS

In the Cloudflare dashboard, open your domain, go to DNS then Records, and add three TXT records: SPF at the root, DKIM at your provider's selector, and DMARC at _dmarc. Set each to DNS only (grey cloud). Cloudflare also offers a built-in DMARC Management wizard under Email.

  1. ›

    Open DNS records

    Select your domain in Cloudflare, then DNS then Records.

  2. ›

    Add SPF

    Add a TXT record, name @, content v=spf1 include:your-esp -all.

  3. ›

    Add DKIM

    Add a TXT record at the selector your email provider gives you (e.g. selector1._domainkey), with their public key value.

  4. ›

    Add DMARC

    Add a TXT record, name _dmarc, content v=DMARC1; p=none; rua=mailto:you@yourdomain. Cloudflare's Email then DMARC Management can also set this up and collect reports.

Copy-to-go prompt

Paste this into Cloudflare (or any AI builder) and fill the {braces}.

I use Cloudflare for DNS on {yourdomain.com}. Give me the exact TXT records (name and content) to add for SPF, DKIM and DMARC so my email authenticates. I send with {your email provider}. Start DMARC at p=none with a reporting address.

FAQ

Should the records be proxied (orange cloud)?

No. SPF, DKIM and DMARC are TXT records and must be DNS only (grey cloud). Proxying applies to A/AAAA/CNAME records for web traffic.

Verify it worked

Run your domain through our free checkers to confirm SPF, DKIM and DMARC resolve correctly.

DNS Health

DMARC Checker

Monitor this automatically

DeliverSignal runs these checks daily and alerts you when something breaks.

Start your free 14-day trial