Your domains, connected properly
Add as many domains as you like. We give you the exact records, check every one as it appears, and keep watching after you are done.
How connecting a domain works
- Add the domain. We check it, convert international names to their DNS form, and look at what is already there: who handles your DNS and where your mail goes today.
- Prove you own it with one TXT record. Until then the domain does nothing.
- Add the mail records. Copy them from the console with one click each, or let your agent or scripts read them from our API and publish them with their own access to your DNS. We check every record as it appears.
- Switch MX last. If your mail lives somewhere else today, import it first. The moment the MX records point to us, you see the first message arrive and can send a test message that reports SPF, DKIM and DMARC results.
Things we never do
- Ask for access to your DNS provider account
- Change or remove records that are not ours, like your website or verification records
- Ask you to replace an existing SPF record: we show you how to merge ours into it
- Accept mail for a domain and then throw it away
- Tie your login to your own domain, so a DNS mistake cannot lock you out
The records, done right
MX, SPF, DKIM, DMARC, MTA-STS and autodiscovery, each marked green, yellow or red as we find it. The full list is in Connecting your domain.
DKIM keys rotate without you
The three DKIM records are CNAMEs that point to keys we publish. One key is active, one is ready, one is retiring, so we can rotate keys without asking you to touch DNS again.
DMARC, step by step
We start with a monitoring-only policy, read the reports for you, and suggest a stricter policy once a few weeks of reports look clean.
Secure delivery
MTA-STS and TLS reporting tell other servers to always use encryption when sending to you. We host the policy and its certificate for you.
Domain health monitoring
A domain lives outside our control. Someone can edit DNS, a registrar can change something, or the registration can simply expire. So we keep checking:
- DNS records every hour for the first two days, then daily, and right away if delivery errors spike
- Registration expiry, with reminders 30, 7 and 1 day before it ends
- DMARC and TLS reports, summarised in plain words: who sends mail as your domain, and whether it passes
- Alerts go to an address outside the affected domain, so the warning actually reaches you
What each state means
| Pending | We are waiting for the ownership record. Mail is not accepted yet. |
|---|---|
| Verified | You own the domain. Sending starts once SPF and DKIM are in place. |
| Active | Everything checks out. Mail is received and sent normally. |
| Needs attention | A record broke (for example SPF or DKIM). Mail is still received, you get a warning in webmail and by email. If DKIM is broken, sending pauses so your mail does not end up in spam. |
| Mail goes elsewhere | Your MX records now point to another provider. We tell you, and after a while ask you to verify the domain again. |
Ownership and safety
One domain, one account
A domain can be active in one account only. If someone else proves ownership through DNS, the domain moves to them and the previous account is notified at its login or recovery address outside that domain. Whoever controls DNS controls the domain.
Expired domains
If a domain pointed elsewhere or did not exist for more than 30 days, it must be verified again. A new owner of an old domain never receives mail meant for the previous one.
Removing a domain
Remove a domain and its aliases stop. Messages already in your mailbox stay. If mail still arrives, senders get a clear bounce, not silence.
Moving from another provider? Read Connecting your domain, Migrating from Gmail or Migrating from Microsoft 365.
Bring every domain you have
Unlimited domains on every account. €0.01 a day, plus what you store and send.
Join the waitlist