Skip to content
Try it free
Automatic setup

Add your email records at Cloudflare

How to add the DNS records that connect your domain to Mühür Mail in the Cloudflare dashboard. The record values are ready in the Mühür Mail dashboard, in your domain's DNS records step.

Check your domainCloudflare help page(opens in a new tab)

If your name servers end in ns.cloudflare.com, your DNS is on Cloudflare and you add the records in the Cloudflare dashboard. If you prefer, Mühür Mail adds them for you with your approval.

Let Mühür Mail add the records

If your DNS is on Cloudflare, you don't have to add the records by hand. With a Cloudflare API token you provide, Mühür Mail first lists the records it will add and change, and writes only the ones you approve.

  1. Open your domain's page in the Mühür Mail dashboard and choose automatic setup with Cloudflare.
  2. Create an API token on the Cloudflare page the link opens. The permissions are filled in (Zone read, DNS edit); under Zone Resources, select only this domain.
  3. Paste the token into Mühür Mail. You see the records that will be added, updated and left untouched.
  4. Review the list and apply it. Changes such as removing existing MX records or editing your existing SPF record happen only if you select them.

If you choose to save the token, Mühür Mail can use it when the DKIM key is replaced or a record breaks. If you don't, the token is used only for that change. You can remove the connection from the dashboard at any time.

Open the DNS settings

  1. Sign in at dash.cloudflare.com and select your domain in your account.
  2. Open DNS in the menu, then Records.
  3. For each record, press Add record, choose the type, fill in the fields and save.

Fields in the record form

  • Type: the record type (TXT, MX, CNAME).
  • Name: the relative name; use @ for the domain itself.
  • Content (TXT), Target (CNAME) or Mail server (MX): the record value.
  • Priority: MX only.
  • TTL: you can leave it on Auto.
  • Proxy status: CNAME records must be DNS only (grey cloud).

Records to add

Add the records in this order. The values in the tables are examples that show the format; copy the values for your domain from the Mühür Mail dashboard.

  1. Ownership record (TXT)

    Required

    Proves the domain is yours. The name is _muhur; the value is the text starting with muhur-verify= in your dashboard. Once ownership is proven, you can create mailboxes.

    ExampleOwnership record (TXT): example records
    TypeNameValue
    TXT_muhur
    muhur-verify=…

    Value is in your dashboard

  2. MX records

    Required

    Make email sent to your domain arrive at Mühür Mail. The name is @, the domain itself; enter the server name and priority for each MX. If you are moving from another provider, remove the old MX records once your mailboxes are ready in Mühür Mail.

    You can't add MX records while Email Routing is on; turn Email Routing off first.

    ExampleMX records: example records
    TypeNameValuePriority
    MX@
    mx1.muhurmail.com
    		10
    MX@
    mx2.muhurmail.com
    		20

  3. SPF record (TXT)

    Required

    States that Mühür Mail's servers may send on your behalf. A domain must have only one SPF record: if you already have one, don't add another; replace the existing record with the merged value suggested in the dashboard.

    ExampleSPF record (TXT): example records
    TypeNameValue
    TXT@
    v=spf1 include:_spf.muhurmail.com ~all

    Value is in your dashboard

  4. DKIM record (CNAME or TXT)

    Required

    The key used to verify the signature on outgoing messages. The name looks like muhur1._domainkey. If the dashboard gives the record as a CNAME, add a CNAME; if it gives a TXT, add a TXT, and copy the value exactly. If a second selector (muhur2) is shown, add it too.

    If the DKIM record is a CNAME, its proxy status must be DNS only.

    ExampleDKIM record (CNAME or TXT): example records
    TypeNameValue
    CNAMEmuhur1._domainkey
    muhur1.d….dkim.muhurmail.com

    Value is in your dashboard

  5. DMARC record (TXT)

    Recommended

    Tells receivers what to do with messages that fail SPF and DKIM, and sends reports to Mühür Mail. The name is _dmarc. If you already have a DMARC record, don't add a second one; you can change the policy later in the Mühür Mail dashboard.

    ExampleDMARC record (TXT): example records
    TypeNameValue
    TXT_dmarc
    v=DMARC1; p=none; rua=mailto:dmarc@muhurmail.com; adkim=r; aspf=r; fo=1

  6. MTA-STS records (CNAME and TXT)

    Recommended

    Asks senders to deliver email to your domain over an encrypted connection. Add a CNAME named mta-sts and a TXT named _mta-sts. Mühür Mail serves the policy file; copy the id in the TXT from the dashboard.

    The mta-sts CNAME must be DNS only; Mühür Mail serves the policy file with its own certificate.

    ExampleMTA-STS records (CNAME and TXT): example records
    TypeNameValue
    CNAMEmta-sts
    mta-sts.muhurmail.com
    TXT_mta-sts
    v=STSv1; id=…

    Value is in your dashboard

  7. TLS-RPT record (TXT)

    Recommended

    Gives the address where problems with encrypted delivery are reported. The name is _smtp._tls.

    ExampleTLS-RPT record (TXT): example records
    TypeNameValue
    TXT_smtp._tls
    v=TLSRPTv1; rua=mailto:tlsrpt@muhurmail.com

  8. Email app records (CNAME)

    Optional

    Let apps such as Thunderbird and Outlook find the server settings on their own: CNAMEs named autoconfig and autodiscover. The dashboard also suggests SRV records for IMAP and SMTP; if your provider supports SRV records, you can add those too. These records are optional.

    The autoconfig and autodiscover CNAMEs must be DNS only.

    ExampleEmail app records (CNAME): example records
    TypeNameValue
    CNAMEautoconfig
    autoconfig.muhurmail.com
    CNAMEautodiscover
    autoconfig.muhurmail.com

Things to watch for

  • Add CNAME records (DKIM, mta-sts, autoconfig, autodiscover) as DNS only, not Proxied; these names don't work with the orange cloud on.
  • If Cloudflare Email Routing is on, Cloudflare manages the MX and SPF records and won't let you edit them. Turn Email Routing off before moving to Mühür Mail.
  • Automatic setup follows the same rules: it leaves unrelated records alone and writes CNAMEs with the proxy off.

Check

After saving the records, press “Check” on your domain's page in the Mühür Mail dashboard. New records usually show up within a few minutes, occasionally a few hours. You can also see the status with the domain checker.

Check your domain

Let Mühür Mail prepare your records

Add your domain; the records you need are ready in the dashboard, and Mühür Mail checks them as you add them.

Try it freeAll guides