Email provider

iCloud+ Custom Email Domain DNS records

Use your own domain with iCloud Mail, included with an iCloud+ subscription.

Where is your domain's DNS managed?

Each guide below uses that host's field names, steps and known problems.

These are the values for any DNS host. Field names differ between hosts, so use the host guides above for the exact boxes to fill in.

Record	Type	Host / Name	Value	Priority	TTL
Domain verification Proves you own the domain	Type	TXT	Host / Name	`@`	Value	Copy from iCloud+ Custom Email Domain	Priority	n/a	TTL	Default
MX records Where incoming email goes	Type	MX	Host / Name	`@`	Value	`mx01.mail.icloud.com`	Priority	10	TTL	Default
MX records Where incoming email goes	Type	MX	Host / Name	`@`	Value	`mx02.mail.icloud.com`	Priority	10	TTL	Default
SPF record Which servers may send as you	Type	TXT	Host / Name	`@`	Value	`v=spf1 include:icloud.com ~all`	Priority	n/a	TTL	Default
DKIM A signature on every message	Type	CNAME	Host / Name	`sig1._domainkey`	Value	`sig1.dkim.yourdomain.com.at.icloudmailadmin.com`	Priority	n/a	TTL	Default
DMARC record What to do with fakes · recommended	Type	TXT	Host / Name	`_dmarc`	Value	`v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com`	Priority	n/a	TTL	Default

What iCloud+ Custom Email Domain's documentation says about each record, in one place.

Apple's page writes these with a trailing period (mx01.mail.icloud.com.). Use whichever form your DNS host expects.

Apple's setup page doesn't list a DMARC record. This is the standard starting record (p=none asks receivers for no action); replace the report address with one you read.

Leaving example.com in the DKIM target

Apple's example target is sig1.dkim.example.com.at.icloudmailadmin.com. Replace example.com with your own domain.

Enter your domain to see which records are in place.