Email Domain Authentication in Cloudflare

We offer three options for domain authentication – Full, Full+ and Subdomain). Read more on these options >

In this article, we will look at examples of setting up all these options in Cloudflare.

Before adding the records by hand, try the automatic setup — see Setting Up Email Domain Authentication.

Settings

📘

Note

In each record below, Name uses your own domain or subdomain (the exact value depends on which authentication option you're setting up), while Target/Content/Mail server use a fixed value that's the same for every account: dkim.esputnik.com, spf2.esputnik.com, or trap.esputnik.com. The esputnik part of a record is the name of the sending infrastructure behind the platform, so it stays as it is — copy the values exactly as the interface generates them.

Log in to your Cloudflare account, go to the DNS app and click Add record.

Full

To verify your domain within the Full option, add the following records:

CNAME

1. In Type, select CNAME.
2. In Name, enter esputnik._domainkey.
3. In Target, enter dkim.esputnik.com.
4. Click Save.

TXT

1. In Type, select TXT.
2. In Name, enter your domain name.
3. In TTL, select 1 hour.
4. In Content, enter v=spf1 include:spf2.esputnik.com ~all.
5. Click Save.

Full+

To verify your domain within the Full+ option, add the following records:

TXT

1. In Type, select TXT.
2. In Name, enter your subdomain name.
3. In TTL, select 1 hour.
4. In Content, enter v=spf1 include:spf2.esputnik.com ~all.
5. Click Save.

MX

1. In Type, select MX.
2. In Name, enter your subdomain name.
3. In Mail server, enter trap.esputnik.com.
4. In TTL, select 1 hour.
5. In Priority, select 10.
6. Click Save.

The ready record would look as follows:

Subdomain

The ready record within the Subdomain option would look as follows: