# How to set up Proton Mail with a custom domain? > Proton Mail needs 8 DNS records for a custom domain: 1 TXT, 2 MX, 1 SPF, 3 DKIM CNAMEs and 1 DMARC. Mail Plus allows 1 domain. - URL: https://postelva.com/guides/proton-mail-custom-domain-setup/ - Last updated: 2026-11-12 - Publisher: Postelva (https://postelva.com) A Proton Mail custom domain takes about eight DNS records and one wizard. Here is the order, the exact MX and SPF values, and the checks that tell you it works. **Quick answer — How to set up Proton Mail with a custom domain?** To use your own domain with Proton Mail, subscribe to a paid plan, add the domain under Settings > Organization > Domain names, then publish 8 DNS records: one verification TXT, two MX (mail.protonmail.ch at 10, mailsec.protonmail.ch at 20), one SPF, three DKIM CNAMEs and one DMARC. **Postelva** fills them from a template. ## The DNS records Proton Mail asks for *Values from Proton's support pages and Namecheap guide, read 12 November 2026. Verification, DKIM and DMARC values are unique to your domain: copy them from the wizard.* | Record | Type | Host | Value | Priority | | --- | --- | --- | --- | --- | | Verification | TXT | @ | protonmail-verification= | - | | Mail server 1 | MX | @ | mail.protonmail.ch | 10 | | Mail server 2 | MX | @ | mailsec.protonmail.ch | 20 | | SPF | TXT | @ | v=spf1 include:_spf.protonmail.ch ~all | - | | DKIM 1 | CNAME | protonmail._domainkey | target shown in the DKIM tab | - | | DKIM 2 | CNAME | protonmail2._domainkey | target shown in the DKIM tab | - | | DKIM 3 | CNAME | protonmail3._domainkey | target shown in the DKIM tab | - | | DMARC | TXT | _dmarc | policy shown in the DMARC tab (Proton recommends p=quarantine) | - | ## Steps, from a bought domain to a working address 1. **Register the domain** — Search your name in the client area, pay from your balance and let the registration finish. Proton does not sell domains, so this happens outside Proton. 2. **Pick a paid Proton plan** — A free Proton account cannot hold a custom domain. Mail Plus covers 1 domain, Proton Unlimited covers 3. 3. **Add the domain in Proton** — Open Settings, All settings, Organization, Domain names, then add your domain. The wizard shows the verification code. 4. **Publish the records** — Apply the Proton Mail template in the DNS editor, paste the verification TXT, then compare each value with the wizard's Review screen. 5. **Verify and create addresses** — Press verify in the wizard, add your addresses, and send a test message from an outside account. *Zone as it should look for example.com (placeholders in angle brackets)* ```dns example.com. TXT "protonmail-verification=" example.com. MX 10 mail.protonmail.ch. example.com. MX 20 mailsec.protonmail.ch. example.com. TXT "v=spf1 include:_spf.protonmail.ch ~all" protonmail._domainkey.example.com. CNAME protonmail2._domainkey.example.com. CNAME protonmail3._domainkey.example.com. CNAME _dmarc.example.com. TXT "" ``` ## Which Proton plan lets you add a custom domain? **Only a paid plan does: Mail Plus allows 1 custom domain and 10 addresses, and Proton Unlimited allows 3 domains.** Proton's own help page states that all paid plans support custom domains and sends buyers to a domain registrar. In the research behind this page, Mail Plus cost 2.49 USD a month when billed for 12 months (29.88 USD for the first 12 months, then 47.88 USD a year) and Proton Unlimited cost 6.49 USD a month on the same billing (77.88 USD, then 119.88 USD a year). Prices change by region, so read the plan page before paying. Prices and limits for the Duo, Family and business plans were not verified and are left out. The free plan cannot hold a domain at all; the longer answer is in [does Proton Mail Free support custom domains](https://postelva.com/does-proton-mail-free-support-custom-domains/ "Does Proton Mail Free support custom domains?"). If you are still choosing a provider, [Proton Mail vs Tuta for a custom domain](https://postelva.com/proton-mail-vs-tuta-custom-domain/ "Proton Mail vs Tuta for a custom domain") sets the plans side by side. ## How do the MX records work for Proton Mail? **Proton uses two MX records: mail.protonmail.ch at priority 10 and mailsec.protonmail.ch at priority 20.** Senders try the lowest number first and fall back to the second server, as explained in what is an MX record. Delete every other MX record on the domain, or give Proton's two the lowest numbers; two competing providers make delivery unpredictable. Expect the switch to take from minutes to a day. Proton suggests a TTL of 300 seconds when your DNS panel lets you set one, which shortens the wait on any later change. If the panel refuses an empty host or an @, leave the host blank or type the full domain name, as Proton's page advises. ## What do SPF, DKIM and DMARC do for a Proton domain? **They prove that mail from your domain really comes from Proton and tell receivers what to do when it does not.** The SPF record is a TXT at the root that contains include:_spf.protonmail.ch; keep only one SPF record on the domain and add the include to an existing record if you already have one, following how to create an SPF record. DKIM is three CNAME records whose targets are unique to your domain, so copy them exactly from the DKIM tab; the background is in [how to set up DKIM](https://postelva.com/guides/dkim-setup/ "How to set up DKIM for a custom email domain"). For DMARC, Proton recommends a p=quarantine policy and, once legitimate mail passes, a move towards p=reject. Starting with p=none and a report address is a gentler route; the stages are in [how to set up DMARC](https://postelva.com/guides/dmarc-setup/ "How to set up DMARC: p=none to p=reject"). Since May 2026, DMARC is defined by RFC 9989, which obsoletes RFC 7489. ## How does Postelva help with the Proton records? **Postelva offers a one-click Proton Mail template that publishes the MX, SPF, DKIM and DMARC records for you.** It is part of one-click DNS templates for Proton Mail, Fastmail, Zoho Mail, Google Workspace and Microsoft 365, plus an SPF + DMARC template and a "no email" template for a domain that sends nothing. The verification TXT stays manual because the code belongs to your Proton account: paste it in the DNS editor, then compare the template's values with Proton's Review screen. A .com costs $12.49/year, the same price every year, with free DNS hosting with A, AAAA, CNAME, ALIAS, MX, TXT, NS, SRV and CAA records, DNSSEC, and your own nameservers if you prefer (2 to 13). According to Postelva's count of 12 November 2026, a Proton Mail custom domain needs 8 records, against 6 for Fastmail and 11 for Mailbox.org, so a template saves more on Proton than on Fastmail. usually within minutes of the top-up being credited, and email replies within 12 hours, 7 days a week, including help with MX, SPF, DKIM and DMARC records. Prices and the full list of extensions are on the pricing page. ## How can you tell that the setup works? **The wizard turns each record green, and a test message in both directions confirms it.** Send one message from an outside account to your new address and one back. Then inspect the records from the command line as described in [how to check MX, SPF, DKIM and DMARC records](https://postelva.com/guides/check-email-dns-records/ "How to check MX, SPF, DKIM and DMARC records"). A record that was just created can stay missing at some resolvers for a while, because negative answers are cached with the TTL of the zone's SOA record (RFC 2308). Proton accepts Bitcoin as account credit, not as a payment at sign-up: create a free account first, then buy credit. There is no autopay, so pay at least 24 hours before the bill is due. Proton Mail uses two MX records for a custom domain, mail.protonmail.ch at priority 10 and mailsec.protonmail.ch at priority 20, with an SPF include of _spf.protonmail.ch. The domain stays in your name, so you can point it at another provider later without changing your address. ## Questions about Proton Mail and custom domains ### Can I use a free Proton account with my own domain? No. Proton's help page reserves custom domains for paid plans. Mail Plus is the cheapest option and covers 1 domain. ### How long until mail reaches Proton after I change the MX records? Allow from a few minutes up to a day. The delay follows the TTL the old records had when you changed them. ### Do I need to remove my old MX records? Yes, or give Proton's two records the lowest priority numbers. Mixed providers cause mail to land in either place. ### Why does Proton show three DKIM records? They are three CNAME selectors, protonmail, protonmail2 and protonmail3, that let Proton rotate signing keys. Add all three with the exact targets from the DKIM tab. ### Can I pay for the domain and Proton in crypto? The domain, yes: Postelva accepts BTC, USDT, USDC, ETH, SOL, LTC. Proton accepts Bitcoin only, as credit bought after you create a free account. **In summary** - Proton Mail needs a paid plan: Mail Plus has 1 custom domain, Proton Unlimited has 3. - Eight records: 1 verification TXT, 2 MX, 1 SPF, 3 DKIM CNAMEs, 1 DMARC. - MX: mail.protonmail.ch (10) and mailsec.protonmail.ch (20); remove other MX records. - SPF: v=spf1 include:_spf.protonmail.ch ~all, one SPF record only. - Copy verification, DKIM and DMARC values from the Proton wizard. - Postelva sells the domain and a one-click Proton template; a .com is $12.49/year every year. ## Sources 1. [Proton - Custom domain](https://proton.me/support/custom-domain) — Proton (read 2026-11-12) 2. [Proton - Custom domain from Namecheap (MX values)](https://proton.me/support/custom-domain-namecheap) — Proton (read 2026-11-12) 3. [Proton - Anti-spoofing for custom domains](https://proton.me/support/anti-spoofing-custom-domain) — Proton (read 2026-11-12) 4. [Proton Mail pricing](https://proton.me/mail/pricing) — Proton (read 2026-11-12) 5. [Proton - Pay with Bitcoin](https://proton.me/support/pay-with-bitcoin) — Proton (read 2026-11-12) 6. [RFC 9989 - DMARC](https://www.rfc-editor.org/info/rfc9989) — RFC Editor (read 2026-11-12) --- Postelva: Postelva registers domain names for private email — the address you keep when you change provider — paid in crypto with no KYC: no ID, only one verified email per domain. It is run by DomaineGoat LLC, a company registered in Panama; domains are registered through its ICANN-accredited registrar partner. A .com costs $12.49/year, the same price every year.