Email provider
Microsoft 365 DNS records
Outlook and Exchange Online email for your own domain, managed from the Microsoft 365 admin center. Covers the worldwide service only (not GCC or 21Vianet).
Where is your domain's DNS managed?
Each guide below uses that host's field names, steps and known problems.
- Amazon Route 53 Microsoft 365 on Amazon Route 53
- Bluehost Microsoft 365 on Bluehost
- Cloudflare Microsoft 365 on Cloudflare
- DreamHost Microsoft 365 on DreamHost
- GoDaddy Microsoft 365 on GoDaddy
- Hostinger Microsoft 365 on Hostinger
- IONOS Microsoft 365 on IONOS
- Name.com Microsoft 365 on Name.com
- Namecheap Microsoft 365 on Namecheap
- Network Solutions Microsoft 365 on Network Solutions
- OVHcloud Microsoft 365 on OVHcloud
- Porkbun Microsoft 365 on Porkbun
- SiteGround Microsoft 365 on SiteGround
- Squarespace Domains Microsoft 365 on Squarespace Domains
- Wix Microsoft 365 on Wix
- WordPress.com Microsoft 365 on WordPress.com
The records Microsoft 365 needs
These are the values for any DNS host. Field names differ between hosts, so use the host guides above for the exact boxes to fill in.
| Record | Type | Host / Name | Value | Priority | TTL | |||||
|---|---|---|---|---|---|---|---|---|---|---|
| Domain verification Proves you own the domain | Type | TXT | Host / Name | @ | Value | Copy from Microsoft 365 admin center Looks like: MS=ms followed by digits | Priority | n/a | TTL | 3600 (1 h) |
| MX records Where incoming email goes | Type | MX | Host / Name | @ | Value | Copy from Microsoft 365 admin center Looks like: <your MX token>.mail.protection.outlook.com, or for domains set up on Microsoft's newer DNSSEC infrastructure <your MX token>.<subdomain>.mx.microsoft | Priority | 0 | TTL | 3600 (1 h) |
| SPF record Which servers may send as you | Type | TXT | Host / Name | @ | Value | v=spf1 include:spf.protection.outlook.com -all | Priority | n/a | TTL | 3600 (1 h) |
| DKIM A signature on every message · recommended | Type | CNAME | Host / Name | selector1._domainkey | Value | Copy from Microsoft 365 admin center Looks like: selector1-yourdomain-com._domainkey.<your onmicrosoft prefix>.<letter>-v1.dkim.mail.microsoft (older domains: selector1-yourdomain-com._domainkey.<prefix>.onmicrosoft.com) | Priority | n/a | TTL | 3600 (1 h) |
| DKIM A signature on every message · recommended | Type | CNAME | Host / Name | selector2._domainkey | Value | Copy from Microsoft 365 admin center Looks like: selector2-yourdomain-com._domainkey.<your onmicrosoft prefix>.<letter>-v1.dkim.mail.microsoft (older domains: selector2-yourdomain-com._domainkey.<prefix>.onmicrosoft.com) | Priority | n/a | TTL | 3600 (1 h) |
| DMARC record What to do with fakes · recommended | Type | TXT | Host / Name | _dmarc | Value | v=DMARC1; p=none; pct=100; rua=mailto:dmarc@yourdomain.com | Priority | n/a | TTL | Default |
| Autodiscover Automatic app setup · recommended | Type | CNAME | Host / Name | autodiscover | Value | autodiscover.outlook.com | Priority | n/a | TTL | 3600 (1 h) |
Common Microsoft 365 mistakes
Switching MX before adding mailboxes
Add users and mailboxes in Microsoft 365 before changing the MX record, or incoming mail has nowhere to go.
Adding a second SPF record
Microsoft says not to create a new SPF record if one exists. Add include:spf.protection.outlook.com to the existing record so there is a single SPF record.
Publishing DKIM CNAMEs but not turning on signing
After both selector CNAMEs resolve, switch on Sign messages for this domain with DKIM signatures in the Defender portal.
Using a TTL longer than 6 hours on MX
Exchange Online only supports TTL values under 6 hours (21,600 seconds). One hour (3600) is the recommended value.
Check your Microsoft 365 DNS
Enter your domain to see which records are in place.
Sources
- Add a custom domain to Microsoft 365 (Microsoft Learn) Checked October 21, 2026
- Connect DNS records at Namecheap to Microsoft 365 (Microsoft Learn) Checked October 21, 2026
- Connect your domain by adding DNS records (Microsoft Learn) Checked October 21, 2026
- External Domain Name System records for Microsoft 365 (Microsoft Learn) Checked October 21, 2026
- How SMTP DANE works (Microsoft Learn) Checked October 21, 2026
- How to use DKIM for email in your custom domain (Microsoft Learn) Checked October 21, 2026
- Set up DMARC to validate email in Microsoft 365 (Microsoft Learn) Checked October 21, 2026
- Set up SPF to identify valid email sources for your Microsoft 365 domain (Microsoft Learn) Checked October 21, 2026
Rather have someone do it for you?
Tell us your domain and we will add and verify every record for your email, then send you the check results.