Copy Your DNS Records Without Mistakes
MailAfiniti Support
Type, Host, and Value explained in plain terms, plus the one @ symbol mistake that trips up almost everyone when adding MailAfiniti's DNS records.
Adding DNS records is copy and paste, but it is copy and paste where one stray space or a wrong Host value means your mail silently fails to verify. This guide walks each field so you get all four records right the first time, and it names the single mistake that causes most support tickets.
What you'll do:
- Understand the three fields on every record
- Add MX, SPF, DKIM, and DMARC one at a time
- Avoid the
@mistake that breaks the root domain - Save and let them verify
Keep the MailAfiniti Domains page open in one tab and your DNS provider open in another. You will copy one row at a time between them.
The three fields on every record
Every record you add has the same three parts, whatever your provider calls them:
- Type is the record kind: MX, TXT, or CNAME. MailAfiniti tells you the type for each record.
- Host (also shown as Name) is which part of your domain the record applies to.
- Value (also shown as Content or Points to) is the exact string you paste from MailAfiniti.
Two rules that prevent almost every error:
- Copy the Value exactly: use the copy button on the MailAfiniti Domains page rather than retyping. DKIM values in particular are long strings of random characters, and one wrong character makes the whole record invalid.
- Never add a trailing space. Paste, then check the end of the field. A hidden space at the end of a value is the most common cause of a record that "looks right" but will not verify.
The @ mistake almost everyone makes
Here is the one to watch. In the Host field, @ means "the root domain itself" (acme.com). Many providers automatically add your domain to whatever you type in Host. So if MailAfiniti shows the host as @ and you type your full domain, or if you type dkim._domainkey on a provider that auto-appends, you can end up with a doubled host like acme.com.acme.com.
The safe approach:
- If MailAfiniti shows the host as
@, enter@(or leave the field blank if your provider does not accept@, which is equivalent on most of them). - For the DKIM and DMARC hosts, MailAfiniti shows something like
dkim._domainkeyand_dmarc. Enter only that portion, not the full domain. Your provider adds your domain automatically. - After saving, look at how the provider displays the finished host. It should read
dkim._domainkey.acme.com, notdkim._domainkey.acme.com.acme.com. If you see the domain twice, delete the record and re-add it with just the short host.
If your domain is a subdomain (for example mail.acme.com), the DKIM and DMARC hosts include that subdomain, so MailAfiniti shows dkim._domainkey.mail and _dmarc.mail. Enter them exactly as shown. MailAfiniti handles this for you on the Domains page, so copy what it displays.
Add the four records, one at a time
Work top to bottom on the MailAfiniti Domains page. For each record, click Add Record in your DNS provider, then fill the three fields.
MX record. Type MX, host @, value as shown by MailAfiniti, and priority 10 (or whatever MailAfiniti specifies). MX is what actually routes incoming mail, so this one matters most. Some providers ask you to remove any old MX records from a previous mail host first. If you were using Google or Microsoft before, delete their MX records so mail stops going to them.
SPF record. Type TXT, host @, value as shown (it starts with v=spf1). If you already have an SPF record from another service, do not add a second one. Merge them, or contact us and we'll help, because two SPF records is invalid and worse than one.
DKIM record. Type as shown by MailAfiniti (often TXT or CNAME), host dkim._domainkey (plus any subdomain), value exactly as copied. This is the long one. Use the copy button.
DMARC record. Type TXT, host _dmarc, value as shown (it starts with v=DMARC1).
Save and verify
Save in your DNS provider after each record, or all at once if it batches them. Then go back to MailAfiniti's Domains page. Each record shows a status:
- Green (Verified): MailAfiniti can see the record and it is correct.
- Amber (record set, not yet verified): the record exists but DNS has not propagated yet, or something is slightly off.
- Red (missing): MailAfiniti cannot find the record at all.
Green across all four means you are done. If you see amber, that is usually just propagation and normal for the first hour or so. If it stays amber or shows red, the next guide covers the fixes.
Next steps
- Still says "Not Verified"? is the guide for anything not turning green.
- DNS Configuration has the full reference for every record.
- Getting Started covers what comes after verification.
Something not verifying? Email support@mailafiniti.io with your domain and we'll check the records for you.