How to use a custom domain from Cloudflare with Proton Mail
If you’ve purchased a custom domain from Cloudflare (such as yourdomain.com), you can use it to send and receive emails with your Proton Mail account (for example, using the email address [email protected]).
To do this, you must have a paid Proton plan(new window). The number of custom domains you can use with Proton Mail depends on your plan.
- Proton Mail Plus: 1 custom domain
- Proton Unlimited: 3 custom domains
- Proton Visionary (legacy users only): 10 custom domains
- Proton Mail Essentials: 3 custom domains
- Proton Family: 3 custom domains
- Proton Mail Professional: 10 custom domains
- Proton Business Suite: 15 custom domains (by default with the option to add more)
The procedure for setting up your custom domain for use by your Proton Mail account is as follows:
- Add your domain to your Proton Mail account.
- Verify your domain so that Proton knows it is genuinely yours.
- Create new users and add team members to your account.
- Configure your domain registrar’s DNS records so that Proton Mail handles the emails sent and received using that domain.
- Set up your email address.
Add your domain
1. In your browser, log in to your Proton Mail account and select Settings → All settings → Proton Mail → Domain names → Add domain.
2. Enter your domain name and click Next. You might be asked to re-enter your Proton Mail password for security reasons.
Verify your domain
The first thing you have to do after adding a custom domain name is to show Proton Mail that you control this domain. You can do this by adding a TXT record with a unique code that Proton Mail has generated to your domain’s DNS records in your registrar’s domain management portal.
Proton Mail servers will then look up all the TXT records for your domain and see if any match the verification code. If we find a match, then verification succeeds, and you can move on to the next steps.
Once you click Next, you will be taken to the Verify tab. You can also reach it from Settings → All settings → Proton Mail → Domain Names → Domain by clicking on the Actions → Review button and selecting the Verify tab.
In the Verify tab, your Host Name (@) and TXT verification record are shown to the right of your newly added domain.
Click on the small Copy icon to the left of the TXT verification record to copy it to your clipboard, then:
1. Log in to your Cloudflare account and select the domain you would like to use.
2. Select the DNS tab → Add record. Enter the following values:
- Type: TXT
- Name: @ (If the @ value is not accepted, enter your domain instead)
- Content: Go back to the Proton Mail custom domain setup window. Paste the text you copied from the Value / Data / Points to column in Proton Mail into the Content field.
- TTL: Select a low value to update your DNS record faster.
Click Save when you’re done.
Wait a few minutes, then click Next in the Proton Mail Edit domain console to trigger a DNS check by our servers. If it succeeds, you can now move on to the next step (creating an MX record). If it didn’t succeed, don’t worry; the process can take a while, so try again in an hour.
Create an organization
Now that you have a domain, you can create an organization(new window) and add users(new window) to it.
Share login information with your team members
Before you change your MX records, we recommend informing your team members of the upcoming change. After you change the MX records, emails will be delivered to their Proton Mail inboxes instead of their old inboxes.
Create MX records in Cloudflare to activate your domain
Once your domain is verified, click Next to go to the MX tab (or come back to this page later and simply go directly to the MX tab). The mail exchanger (MX) record is vital for email operation: It tells the internet which server(s) should receive your domain’s email.
If you are setting up a new domain, go ahead and add the specified MX records in your Cloudflare control panel. To do this, open your Cloudflare portal and:
1. Select the DNS management option for the domain you would like to use.
2. Click Add record and enter the following values:
- Type: MX
- Name: @ (If the @ value is not accepted, enter your domain instead.)
- Mail server: mail.protonmail.ch
- TTL: Select a low value to update your DNS records faster.
- Priority: 10
3. Create a second MX record using these values:
- Type: MX
- Name: @ (If the @ value is not accepted, enter your domain instead.)
- Mail server: mailsec.protonmail.ch
- TTL: Select a low value to update your DNS records faster.
- Priority: 20
Click Save when you’re done.
If your domain currently has existing mailboxes, we recommend adding all used email addresses before switching your MX records to Proton Mail to ensure a smooth transition. We describe how to do this below.
This will help you avoid disruption to your email delivery because Proton Mail will only accept mail for addresses that you have added. mail.protonmail.ch points to Proton Mail’s mail servers, so once you have made this change, you are telling the internet to send email for your domain to your Proton Mail account.
If you have MX records for multiple services, the email will be delivered to the service with the highest priority (lowest value). If you have other MX records, you should either delete them or make sure mail.protonmail.ch‘s priority is a smaller number (higher priority) than the other MX records.
Again, it may take up to a day for MX changes to propagate, and email may still go to your old MX during this transition. Once we detect your domain’s top MX record is pointing to Proton Mail, the MX tab will show a green tick icon.
Set up your addresses
If you are changing an existing domain to deliver emails to your Proton Mail inbox, you should set up all existing email addresses before filling in the MX records (as described above).
Select the Address tab → Add address.
This will take you to the Organization section of your Proton Mail accounts page. Click on Add Address to create a Proton Mail email address using your custom domain. If you have more than one custom domain, you can select which one to use from the dropdown list.
Create SPF, DKIM, and DMARC records
For security reasons, we recommend adding SPF and DKIM records. Setting up DMARC is an optional, advanced feature.
Learn more about SPF, DKIM, and DMARC(new window)
Setting up SPF and DMARC records in the Cloudflare console is similar to setting up TXT records.
1. Select the DNS management for the domain you would like to use.
2. To create the SPF record, click Add record and enter these values:
- Type: TXT
- Name: @ (If the @ value isn’t accepted, enter your domain instead)
- TTL: Select a low value to update your DNS record faster.
- Content: Copy and paste the value from the Value / Data / Points to column of the SPF tab in the Proton Mail Edit Domain console.
Click Save when you’re done.
3. To create the DKIM record, repeat the steps and enter these values:
- Type: CNAME
- Name: protonmail._domainkey
- Target: Copy and paste the value from the Value / Data / Points to column of the DKIM tab in the Proton Mail Edit Domain console.
- TTL: Select a low value to update your DNS record faster.
- Proxy status: DNS only
Note: Please make sure you select the DNS only option from the Proxy status menu. Otherwise, the record will not propagate.
To add a second and third DKIM record, repeat these steps with the appropriate record names protonmail2._domainkey and protonmail3._domainkey.
4. To create the DMARC record, create another TXT record using the following settings:
- Type: TXT
- Name: _dmarc
- TTL: Select a low value to update your DNS record faster.
- Content: Copy and paste the value from the Value / Data / Points to column of the DMARC tab in the Proton Mail Edit Domain console
You can now send and receive emails using your custom domain from Cloudflare with your Proton Mail account!
Setup guides for other domain registrars are also available for:
- Amazon Web Services(new window)
- Bluehost(new window)
- OVH(new window)
- Gandi(new window)
- GoDaddy(new window)
- Google Domains(new window)
- Namecheap(new window)
- Hostpoint(new window)
If you own a domain from a different registrar, please see our generic guide How to use a custom domain with Proton Mail(new window).