Verify a sending domain

Add your domain to Maillayer and publish the DKIM, return-path and DMARC records so inboxes trust your email.

Maillayer sends from your own domain, so inboxes see your name and your reputation, not ours. Before you can send, you prove you own the domain by publishing a few DNS records.

Choose a domain#

We recommend a subdomain just for email, like mail.acme.com or news.acme.com. It keeps your main domain's reputation separate, and you can still send from [email protected] with replies going to [email protected].

Add the DNS records#

Add the domain under Domains. Maillayer shows the exact records to create at your DNS provider (Cloudflare, Route 53, Namecheap, GoDaddy and so on):

RecordTypeWhat it does
DKIMCNAME (or TXT)Signs every email so inboxes can check it really came from you and wasn't changed.
Return pathCNAMELets bounces come back to Maillayer, and aligns SPF with your domain.
DMARCTXTTells inboxes what to do with email that fails the checks. Needed by Gmail and Yahoo for bulk senders.
If you use Cloudflare, set CNAME records to DNS only (gray cloud), not proxied, or verification will fail.

Verification#

Maillayer checks your records automatically. Most domains verify within a few minutes; DNS changes can take up to 48 hours to spread. Once a domain shows Verified, any address on it can be a From address, such as [email protected].

Which of my domains are verified and ready to send from?

Troubleshooting#

  • Copy the host exactly. Some providers add your domain automatically, so enter only the part before it.
  • Remove any old DKIM or DMARC record for the same host before adding the new one.
  • Check a record with dig CNAME host.mail.acme.com or an online DNS lookup.

Next: send transactional email or send a campaign.