iCloud+ Custom Email Domain + Porkbun

Set up iCloud+ Custom Email Domain on Porkbun

The records iCloud+ Custom Email Domain needs, written with the field names Porkbun uses (Host, Answer), in the order to add them.

  • 5 steps
  • 6 DNS records

Before you start

  1. Have your iCloud+ Custom Email Domain account ready. Some values are unique to your account and come from the iCloud+ Custom Email Domain .
  2. Open DNS at Porkbun: Open Domain Management (ACCOUNT, then Domain Management). Click the DNS button under your domain, or Details and then the edit icon under DNS RECORDS.
  3. Keep both tabs open and add the records below one at a time.

Records to add

Copy each value with the button next to it. Rows marked “Copy from iCloud+ Custom Email Domain” are unique to your account.

Domain verification Proves you own the domain Type TXT Host Leave empty Value Copy from iCloud+ Custom Email Domain Priority n/a TTL Default
MX records Where incoming email goes Type MX Host Leave empty Value mx01.mail.icloud.com Priority 10 TTL Default
MX records Where incoming email goes Type MX Host Leave empty Value mx02.mail.icloud.com Priority 10 TTL Default
SPF record Which servers may send as you Type TXT Host Leave empty Value v=spf1 include:icloud.com ~all Priority n/a TTL Default
DKIM A signature on every message Type CNAME Host sig1._domainkey Value sig1.dkim.yourdomain.com.at.icloudmailadmin.com Priority n/a TTL Default
DMARC record What to do with fakes · recommended Type TXT Host _dmarc Value v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com Priority n/a TTL Default

Step by step in Porkbun

Verify your domain

Your email provider needs proof that you control this domain before it accepts email for it.

Type
TXT
Host
Leave this field empty
Answer
Copy it from iCloud+ Custom Email Domain (see below)

Where to find your value

Go to icloud.com/icloudplus, select Custom Email Domain, then Add a domain you own. In step 3, select View to see your personal TXT record.

In Porkbun

  1. Choose TXT as the Type.
  2. Leave Host blank for your bare domain (or enter the subdomain name), and paste the value in Answer.
  3. Click Add.

Point your MX records

MX records tell other mail servers where to deliver your email. How MX works

Type
MX
Host
Leave this field empty
Priority
10
Answer
mx01.mail.icloud.com
  • Apple's page writes these with a trailing period (mx01.mail.icloud.com.). Use whichever form your DNS host expects.
Type
MX
Host
Leave this field empty
Priority
10
Answer
mx02.mail.icloud.com

In Porkbun

  1. Choose MX as the Type.
  2. Leave Host blank, enter the mail server in Answer and the Priority your provider gives you. Leave TTL at its default.
  3. Click Add.
  4. Repeat for each MX record above.

Add the SPF record

SPF lists the services allowed to send email as you. How SPF works

Type
TXT
Host
Leave this field empty
Answer
v=spf1 include:icloud.com ~all

In Porkbun

  1. Choose TXT as the Type.
  2. Leave Host blank for your bare domain (or enter the subdomain name), and paste the value in Answer.
  3. Click Add.

Set up DKIM

DKIM signs your mail so receivers can trust it. How DKIM works

Type
CNAME
Host
sig1._domainkey
Answer
sig1.dkim.yourdomain.com.at.icloudmailadmin.com

In Porkbun

  1. Choose CNAME as the Type.
  2. Enter the Host (it can't be empty) and the target in Answer.
  3. Click Add.

Add the DMARC record (recommended)

DMARC tells receivers what to do with mail that fakes your domain. How DMARC works

Type
TXT
Host
_dmarc
Answer
v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com
  • Apple's setup page doesn't list a DMARC record. This is the standard starting record (p=none asks receivers for no action); replace the report address with one you read.

In Porkbun

  1. Choose TXT as the Type.
  2. Leave Host blank for your bare domain (or enter the subdomain name), and paste the value in Answer.
  3. Click Add.

Check your setup

Once the records are saved, run a live check. We look up your domain in public DNS and tell you what is right, missing or wrong, with the fix in Porkbun’s words.

We only read public DNS records. Nothing is stored.

Common mistakes with iCloud+ Custom Email Domain on Porkbun

Leaving example.com in the DKIM target

Apple's example target is sig1.dkim.example.com.at.icloudmailadmin.com. Replace example.com with your own domain.

Porkbun: CNAME hosts must be unique

A CNAME's Host can't be empty and can't be shared with any other record on the domain.

Visit iCloud+ Custom Email Domain Visit Porkbun

iCloud+ Custom Email Domain on Porkbun: questions

Where do I add iCloud+ Custom Email Domain DNS records in Porkbun?

Open Domain Management (ACCOUNT, then Domain Management). Click the DNS button under your domain, or Details and then the edit icon under DNS RECORDS. Add each record there, one at a time.

What goes in the Host field at Porkbun?

Leave it empty for records on your bare domain, such as MX and SPF. For the others, enter only the part before your domain, for example sig1._domainkey. Porkbun adds your domain automatically.

Do I need to delete my existing MX records at Porkbun?

Yes. Sending servers pick an MX record by its priority (lowest number first) and fall back to the others, so a leftover MX record can receive some or all of your mail. Keep only the iCloud+ Custom Email Domain MX records and delete the rest.

Where do I get my iCloud+ Custom Email Domain DKIM record?

iCloud+ Custom Email Domain DKIM records are CNAME records whose value includes your domain, for example sig1.dkim.yourdomain.com.at.icloudmailadmin.com. Copy the exact values for your domain from the table on this page.

Sources

Every value and step on this page comes from these official pages. Dashboards change, so if something doesn’t match what you see, tell us.

iCloud+ Custom Email Domain on other hosts

Other email providers on Porkbun