Registrar
Email Authentication on Cloudflare
Cloudflare is the most popular DNS provider for developers. Here's how to set up SPF, DKIM, DMARC, and other email records correctly — including the proxy setting that breaks mail servers.
DNS, caching, and (if you use Cloudflare Registrar) renewal and lock all share one login. Each guide below matches the current Cloudflare record editor.
SPF record
One v=spf1 TXT at root — merge providers.
DKIM record
TXT at selector._domainkey — paste full key.
DMARC setup
TXT at _dmarc — start with p=none.
MX record
Priorities, hostnames, no proxy where applicable.
Expiry monitoring
Auto-renew and WHOIS cross-check.
Domain lock
Transfer lock — verify before you move.