SPF, DKIM and DMARC for iCloud Mail custom domains: the exact records

1. SPF

Add (or edit) the single TXT record at your domain root that starts with v=spf1 so it reads: v=spf1 include:icloud.com ~all

If other services send email as you — a newsletter tool, a shop, invoicing — add their include to the same record. A domain must have only one SPF record.

2. DKIM

In iCloud settings, open Custom Email Domain → your domain; Apple shows the DKIM record to add.

With a custom domain in iCloud+, Apple gives you the exact records to add; the DKIM selector is sig1.

3. DMARC

Add a TXT record named _dmarc with v=DMARC1; p=none; rua=mailto:you@yourdomain.com, using a mailbox that exists. Read the daily reports for two to four weeks, then change p=none to p=quarantine so forged mail goes to spam.

Where to add the records

Menu names change, but these are the usual paths:

• GoDaddy: Sign in to GoDaddy → your domain → DNS → Add New Record.
• Cloudflare: Cloudflare dashboard → your domain → DNS → Records → Add record.
• Squarespace: Squarespace → Domains → your domain → DNS → DNS Settings → Add record.
• Namecheap: Namecheap → Domain List → Manage → Advanced DNS → Add New Record.
• IONOS: IONOS → Domains & SSL → your domain → DNS → Add record.
• STRATO: STRATO → Domains → Manage domain → DNS → manage the TXT and CNAME records.
• Wix: Wix → Domains → ⋯ next to your domain → Manage DNS Records → Add record.
• Hostinger: Hostinger hPanel → Domains → Manage → DNS / Nameservers → add a record.
• Amazon Route 53: AWS console → Route 53 → Hosted zones → your domain → Create record.
• Vercel: Vercel → Domains → your domain → DNS Records → Add.
• Hetzner: Hetzner DNS console → your zone → Add record.