Email provider
Proton Mail DNS records
End-to-end encrypted email from Switzerland. Proton shows your exact records in its domain settings.
Where is your domain's DNS managed?
Each guide below uses that host's field names, steps and known problems.
- Amazon Route 53 Proton Mail on Amazon Route 53
- Bluehost Proton Mail on Bluehost
- Cloudflare Proton Mail on Cloudflare
- DreamHost Proton Mail on DreamHost
- GoDaddy Proton Mail on GoDaddy
- Hostinger Proton Mail on Hostinger
- IONOS Proton Mail on IONOS
- Name.com Proton Mail on Name.com
- Namecheap Proton Mail on Namecheap
- Network Solutions Proton Mail on Network Solutions
- OVHcloud Proton Mail on OVHcloud
- Porkbun Proton Mail on Porkbun
- SiteGround Proton Mail on SiteGround
- Squarespace Domains Proton Mail on Squarespace Domains
- Wix Proton Mail on Wix
- WordPress.com Proton Mail on WordPress.com
The records Proton Mail needs
These are the values for any DNS host. Field names differ between hosts, so use the host guides above for the exact boxes to fill in.
| Record | Type | Host / Name | Value | Priority | TTL | |||||
|---|---|---|---|---|---|---|---|---|---|---|
| Domain verification Proves you own the domain | Type | TXT | Host / Name | @ | Value | Copy from Proton Mail settings (Domain names) Looks like: protonmail-verification= followed by a code | Priority | n/a | TTL | Default |
| MX records Where incoming email goes | Type | MX | Host / Name | @ | Value | mail.protonmail.ch | Priority | 10 | TTL | Default |
| MX records Where incoming email goes | Type | MX | Host / Name | @ | Value | mailsec.protonmail.ch | Priority | 20 | TTL | Default |
| SPF record Which servers may send as you | Type | TXT | Host / Name | @ | Value | v=spf1 include:_spf.protonmail.ch ~all | Priority | n/a | TTL | Default |
| DKIM A signature on every message | Type | CNAME | Host / Name | protonmail._domainkey | Value | Copy from Proton Mail settings (Domain names) | Priority | n/a | TTL | Default |
| DKIM A signature on every message | Type | CNAME | Host / Name | protonmail2._domainkey | Value | Copy from Proton Mail settings (Domain names) | Priority | n/a | TTL | Default |
| DKIM A signature on every message | Type | CNAME | Host / Name | protonmail3._domainkey | Value | Copy from Proton Mail settings (Domain names) | Priority | n/a | TTL | Default |
| DMARC record What to do with fakes · recommended | Type | TXT | Host / Name | _dmarc | Value | v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com | Priority | n/a | TTL | Default |
Notes on each record
What Proton Mail's documentation says about each record, in one place.
MX MX records
- Delete any other MX records, or make sure Proton's have the lowest priority number.
SPF SPF record
- Keep one SPF record. To keep an existing one, add include:_spf.protonmail.ch right after v=spf1.
DKIM DKIM
- Add all three DKIM records; Proton rotates keys between them.
- Some hosts reject a trailing period on CNAME values. If yours does, remove the final dot.
DMARC DMARC record
- Start with p=none (no action) and read the reports for a while. Replace the report address with a mailbox you actually read.
- Proton recommends p=quarantine for most domains. Move to it once SPF and DKIM pass.
Common Proton Mail mistakes
Adding only one DKIM record
Proton uses three DKIM CNAMEs (protonmail, protonmail2, protonmail3). Add all three, matching the values in your setup wizard exactly.
Check your Proton Mail DNS
Enter your domain to see which records are in place.
Looks good Needs attention Missing or wrong Info