How to Configure Custom Email Domains and DKIM Records in iCloud Mail

Subscribing to Apple’s iCloud+ service unlocks the ability to use a personalized, custom email domain (e.g., [email protected]) directly within the native Apple Mail ecosystem across iPhone, iPad, Mac, and iCloud.com. Migrating your domain to iCloud Mail eliminates the need for expensive third-party business email hosting while preserving enterprise deliverability through SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) cryptographic authentication.

Prerequisites for Custom Domain Setup

Before configuring custom email in iCloud Mail, ensure you have:

• An active iCloud+ subscription (available on 50GB, 200GB, or 2TB tiers, or via Apple One).
• Ownership of an active domain name registered with a DNS registrar (such as Cloudflare, Namecheap, or GoDaddy).
• Administrative access to your domain’s DNS management console.

Step 1: Adding Your Custom Domain in iCloud Settings

Begin domain registration through Apple’s account portal:

1. On macOS, open System Settings and click your Apple Account (Apple ID) name at the top.
2. Select iCloud, then click Custom Email Domain (or log in directly to icloud.com/settings and select Custom Email Domain).
3. Click Manage, then select Add domain.
4. Choose whether only you will use the domain or if you wish to share it with your Family Sharing group.
5. Enter your domain name (e.g., yourdomain.com) and click Continue.
6. Enter any existing email addresses you currently use on this domain to avoid interruption, or create a brand new email address prefix.

Step 2: Configuring DNS Records at Your Domain Registrar

Apple generates a specific set of DNS records required to route mail and prove domain ownership. Log in to your DNS registrar and add the following records:

1. MX (Mail Exchanger) Records

• Type: MX | Host: @ | Value: mx01.mail.icloud.com. | Priority: 10
• Type: MX | Host: @ | Value: mx02.mail.icloud.com. | Priority: 10

2. TXT (SPF & Verification) Records

• Domain Verification: Type: TXT | Host: @ | Value: apple-domain-verification=... (Apple unique string)
• SPF Authentication: Type: TXT | Host: @ | Value: v=spf1 include:icloud.com ~all

3. CNAME (DKIM Cryptographic Signing) Record

• Type: CNAME | Host: sig1._domainkey | Value: sig1.dkim.yourdomain.com.at.icloudmailadmin.com.

Step 3: Verifying and Activating the Domain in iCloud

Once DNS records are published:

1. Return to the iCloud Custom Email Domain setup window.
2. Click Verify records. DNS propagation typically takes between 5 minutes and a few hours depending on TTL settings.
3. Once verified, Apple confirms: Your domain is ready to use with iCloud Mail.
4. Select your default outbound email address.

Verifying Deliverability and Sending Test Messages

To verify that messages route cleanly without landing in spam folders:

• Open the Mail app on macOS or iOS.
• Compose a new message and click the From dropdown menu to select your new custom domain address.
• Send a test email to an external inbox or deliverability checker (such as Mail-Tester).
• Inspect email headers on the recipient end to verify that SPF, DKIM, and DMARC alignments return PASS.

Configuring a custom domain with DKIM in iCloud Mail delivers professional, branded communications directly through Apple’s secure infrastructure.