The records business email needs
| Record | Type | What it does |
|---|---|---|
| MX | MX | Says which servers receive your mail. |
| SPF | TXT | Lists who may send as your domain. Exactly one per domain. |
| DKIM | TXT or CNAME | Publishes the key that signs your mail. |
| DMARC | TXT, at _dmarc | Tells receivers what to do with mail that fails the checks. |
Your email provider gives you the exact name and value for each one. On GINbox they are on the DNS tab of your domain in the admin panel, each with a copy button, and the tab checks every record until it is right.
Adding a record at Cloudflare
- In the Cloudflare dashboard, open your domain and go to DNS → Records.
- Select Add record and choose the type: MX, or TXT for SPF, DKIM and DMARC (CNAME if your provider gives a CNAME for DKIM).
- Fill in the name, the content (value) and, for MX, the priority. Leave TTL on Auto unless your provider says otherwise.
- For any A, AAAA or CNAME record used by mail, set Proxy status to DNS only (grey cloud).
- Select Save.
Steps from Cloudflare’s own help page, Manage DNS records, checked on 30 October 2026.
Proxy status matters for email. Cloudflare’s proxy (orange cloud) is for websites; mail servers cannot connect through it. Records that mail uses — a mail server’s A record, a DKIM or autodiscover CNAME — must be DNS only. MX and TXT records are never proxied. Cloudflare also accepts long TXT values such as DKIM keys in one box.
Three things to get right
- One SPF record only. If one already exists (it starts with
v=spf1), edit it to include the new provider instead of adding a second. Two SPF records make SPF fail for both. - Change MX last. Add SPF, DKIM and DMARC first, move your old mail, then switch the MX records. See how to change MX records without losing mail.
- Copy names exactly. Hosts add your domain to the name for you: enter
_dmarc, not_dmarc.yourcompany.in, unless the host asks for the full name.
Questions people ask
Why does my email not work after moving DNS to Cloudflare?
Usually because the old MX, SPF or DKIM records were not copied across, or a mail-related CNAME or A record is proxied (orange cloud). Check that every mail record exists and is DNS only.
Should I use Cloudflare Email Routing as well?
Not with business email on your own domain. Email Routing adds its own MX records, which would send mail away from your mailboxes. Use one or the other.
How fast do Cloudflare DNS changes work?
Usually within minutes, because Cloudflare answers for your domain directly. Records cached elsewhere update when their TTL runs out.
Try it on your own domain
Set up a real mailbox at your own domain, with every record checked for you. No card needed.