Skip to main content
iCloud

How to set up DMARC for iCloud in Valimail

Updated over 6 months ago
SPF(supported)
DKIM(recommended)

This article covers the SPF and DKIM authentication processes for iCloud and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

Configuring DKIM authentication for your iCloud emails

  1. Sign in to your account at your domain host.1

  2. Look for the section where you can update your MX records. It might be under Advanced Settings, DNS Management, or Mail Settings.

  3. Delete your existing MX records.

  4. Enter the new DNS records for the iCloud Mail servers.2 In the TXT record, enter the personal TXT record provided to you during setup. In the DKIM record, enter your domain name where it says "example.com".

    • TXT:

      • Record Type: TXT

      • Host: @

      • Value: [Enter the personal TXT record provided during setup]

    • SPF:

      • Record Type: TXT

      • Host: @

      • Value: "v=spf1 include:icloud.com ~all"

      • If you already have an SPF record, simply add "include:icloud.com" to the value before "~all".

    • MX:

      • Record Type: MX

      • Host: @

      • Value: mx01.mail.icloud.com.

      • Priority: 10

    • MX:

      • Record Type: MX

      • Host: @

      • Value: mx02.mail.icloud.com.

      • Priority: 10

    • DKIM:

      • Record Type: CNAME

      • Host: sig1._domainkey

      • Value: sig1.dkim.example.com.at.icloudmailadmin.com.

  5. Save your changes.

  6. On the iCloud Mail setup page, click Verify to confirm setup. It might take a few minutes before your saved changes can be verified.

You can also find the instructions on how to set up DKIM and SPF for iCloud, here.

Add an iCloud DKIM key in Valimail

You can find more detailed information on how to add a DKIM key in Valimail, here:

Configuring SPF authentication for your iCloud emails

Once you establish that iCloud is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

Did this answer your question?