Docs · Domains
Set up your domain’s DNS
You bring a domain; SuperMailOS does the DNS. The exact records come from the mail server’s own zone — not a guessed template — so what you publish is what the server actually expects. You’ll either publish them with one click or copy-paste them, and we verify them live before anything can send.
The records you’ll add
- MX
- Routes inbound mail for your domain to our mail servers.
- SPF (TXT)
- Authorizes our sending infrastructure to send as your domain.
- DKIM (TXT)
- Publishes the public half of the key we sign every message with.
- DMARC (TXT)
- Sets the policy and points aggregate reports at us, so they're parsed into your dashboard.
- MTA-STS + TLS-RPT
- Requires TLS on inbound mail and reports any failures, closing downgrade attacks.
The values are shown in the app, filled in for your domain. You never have to know a DKIM selector or hand-write an SPF string.
One-click, or copy-paste
On Cloudflare, DigitalOcean, Linode, Vultr, Hetzner and Spaceship, SuperMailOS can publish every record for you with one click — you paste an API token, we create the records, and the token is used once and never stored. On registrars with closed APIs (GoDaddy, Namecheap, Squarespace), you copy each record into their DNS panel; the app shows exactly what goes where.
Then we verify — before you can send
As you publish, the app checks each record live. A domain that hasn’t verified simply can’t send, which is the point: it stops half-configured mail from going out and damaging your reputation. Once green, DKIM signing, DMARC reporting and new-domain warm-up begin automatically.
Common snags
- An old MX still present. Remove records pointing at a previous provider, or inbound mail splits between two systems.
- Two SPF records. A domain may have only one SPF (TXT starting
v=spf1); a second one makes both invalid. Merge into the single record the app shows. - Propagation lag. DNS changes can take time to appear depending on your TTLs. Re-run verification; it clears once the record is visible.
Want the theory behind each record first? The complete guide to email DNS records walks through the whole chain. Then connect a mail app.