How to Configure DNS for Business Email: Step-by-Step

Quick answer: To know how to configure DNS for business email, you need to access the panel where your domain is managed and enter four essential records: MX (to receive messages), SPF (to authorize the sending server), DKIM (cryptographic authentication key), and DMARC (fraud protection policy). Setting up this foundation ensures your emails reach the inbox instead of landing in spam.

What is DNS and what is its role in business email?

DNS (Domain Name System) works like the public address book of the internet. When someone sends a message to your professional address or when you send a quote to a client, mail servers consult DNS to find out where to route the message and to confirm whether the sender is legitimately authorized to use that domain.

If these records are incorrect or missing, two things happen: your company stops receiving messages, or your sent emails go straight to junk mail. Modern providers like Google and Yahoo have made strict authentication rules mandatory, requiring extra attention from business owners.

What are the four mandatory records for business email?

For your business email to operate with maximum security and high deliverability, there are four fundamental records in your domain's DNS zone:

1. MX Record (Mail Exchanger): Tells the world which servers receive messages on behalf of your domain. Without it, no one can send emails to you. Learn more details in our guide on MX records.

2. SPF Record (Sender Policy Framework): A line of text (TXT) that lists the servers authorized to send emails using your domain, preventing scammers from spoofing your brand. The formal technical specification is detailed in RFC 7208.

3. DKIM Record (DomainKeys Identified Mail): A TXT or CNAME record that attaches a cryptographic digital signature to your sent messages. The destination server reads this public key in DNS and confirms that the content was not altered in transit, as standardized by RFC 6376.

4. DMARC Record: A policy that instructs receiving servers on how to handle messages that fail SPF or DKIM (reject, quarantine, or accept), as well as generating security reports. The protocol is defined in RFC 7489. If you want to dive deeper, check out our article on DMARC configuration.

How to configure DNS for business email step by step?

The setup takes place in the panel where your domain's DNS zone is hosted (usually where you bought the domain or in a DNS provider like Cloudflare). In Domailo, for example, this entire process is simplified: the dashboard generates the exact values you need to paste, making the process fast even for those without technical knowledge.

Step 1: Access the DNS management zone

Log in to your domain provider or DNS service dashboard. Look for the section called "DNS Management", "DNS Zone", or "DNS Editor". It is in this table that you will add the new records provided by your email service.

Step 2: Configure the MX entry (Mail Exchanger)

Create a new entry with the MX type. In the name or host field, enter @ (or leave it blank, depending on the interface, indicating the root of the domain). In the value or destination field, enter the address provided by your email provider (in Domailo, the MX server address is shown during domain connection). Set the indicated priority (usually 10).

Step 3: Add the SPF entry

Create an entry of type TXT. In the name or host field, use the name indicated by the dashboard (in Domailo, SPF is set on the sending subdomain; in other providers it is usually @). In the value field, enter the provided SPF record. It typically starts with v=spf1 and ends with ~all or -all. Remember: a domain should never have more than one active SPF record at the same time; if you use other sending tools, merge the mechanisms into the same record.

Step 4: Add the DKIM key

Create records of type CNAME (or TXT, as specified in the panel). The name of each record is an alphanumeric string followed by ._domainkey. In the value field, paste exactly the destination indicated in your email provider's dashboard.

Step 5: Configure the DMARC policy

Create a TXT record with the name _dmarc. To start without the risk of accidentally blocking legitimate messages, you can use the basic monitoring value:

v=DMARC1; p=none; sp=none;

This policy tells recipients to only monitor failures without immediately rejecting messages, meeting the requirements established in Google's sender guidelines.

Summary of DNS records for professional email

To make it easy to review before saving changes, here is how Domailo records look (the exact region and keys appear in the dashboard):

Record Type	Name / Host	Typical Value / Example	Purpose
MX	@	inbound-smtp.<region>.amazonaws.com (priority 10)	Receiving messages
MX and TXT (SPF)	sending subdomain indicated in dashboard	feedback-smtp.<region>.amazonses.com (MX, priority 10) and v=spf1 include:amazonses.com ~all (TXT)	Authorizing sending servers
CNAME (DKIM)	<key>._domainkey	<key>.dkim.amazonses.com	Digital signature against spoofing
TXT (DMARC)	_dmarc	v=DMARC1; p=none;	Domain protection and reputation

The special case of Registro.br: why use Cloudflare?

In Brazil, many companies purchase their domains ending in .com.br directly from Registro.br. However, the free DNS system offered by the Registro.br dashboard has an important technical limitation: it does not accept the underscore character (_) in text record names (as documented in Registro.br technical specifications).

Because both DKIM validation (_domainkey) and DMARC (_dmarc) require using the _ character, it is not possible to configure modern, secure email authentication using only the basic Registro.br DNS.

The most recommended and straightforward solution for this scenario is to keep domain registration at Registro.br, but delegate DNS management to Cloudflare (using Cloudflare's completely free plan). The procedure is very simple:

1. Create a free account on Cloudflare and add your domain.
2. Cloudflare will provide two nameservers.
3. In the Registro.br panel, go to the "DNS" section, click "Alterar servidores DNS" and replace the addresses with the servers provided by Cloudflare.
4. From there, you create the MX, SPF, DKIM, and DMARC records inside Cloudflare's fast dashboard, which accepts special characters without any restriction.

How to verify if the settings were applied correctly?

After saving the records, changes can take from a few minutes to a few hours to propagate across the worldwide network of computers. You do not have to guess if everything worked: you can run practical tests to confirm the setup.

You can consult free online diagnostic tools (such as MXToolbox or Whatsmydns) or follow our detailed guide on how to verify if your domain is configured for email. In addition, sending a test message to a personal Gmail address and clicking "Show original" allows you to check whether SPF, DKIM, and DMARC statuses all display as "PASS".

Traditional solutions versus a simplicity-first platform

Configuring DNS often intimidates small business owners because traditional enterprise tools (like Google Workspace or Microsoft 365) were designed for large IT departments, charge heavily per individual user, and feature dozens of screens packed with confusing jargon.

If your company requires complex spreadsheet applications, an integrated office suite, and legacy protocols like IMAP with local client synchronization, these traditional suites remain the ideal choice. However, for small teams that simply want stable business email, a modern browser-based inbox, and predictable pricing per company, that complexity is an unnecessary obstacle.

At Domailo, you register your domain and receive clean, step-by-step instructions for each record you need to enter. The system verifies domain ownership and validates whether records are correct before you start operating, eliminating the headache of mysterious setups.

Furthermore, Domailo does not charge per user: plans cover the entire organization in fixed packages. The Startup plan costs US$ 5/month (or US$ 50/year on the annual plan) with 2 users and 2 mailboxes; the Essential plan costs US$ 9/month (or US$ 90/year) with 5 users, 5 mailboxes, and up to 3 domains; and the Team plan costs US$ 19/month (or US$ 190/year) with 20 users, 20 mailboxes, and up to 10 domains. All plans include shared mailboxes with individual logins and webmail with light and dark themes.

Conclusion: configure your DNS and guarantee your email delivery

Knowing how to configure DNS for business email is the dividing line between having your messages read by clients or being dumped in the spam folder. With MX, SPF, DKIM, and DMARC records properly pointed, your brand gains technical and institutional credibility.

If you want to simplify this technical journey and get full-featured business email using your company's domain without paying fortunes per user, Domailo is the ideal choice for your business. You can test all features for 30 days on paid plans: credit card entry only occurs after you verify domain ownership, and billing only starts at the end of the trial period if you decide to continue.