Troubleshooting
TXT and CNAME entries for SPF, DKIM, and DMARC when Cloudflare proxies email-related names correctly.
Mail-related hostnames used for MX or DKIM CNAMEs generally must be DNS only (grey cloud) unless your provider explicitly supports proxied modes—incorrect orange-cloud settings break mail.
Add SPF, DKIM public keys, and DMARC TXT records exactly as supplied—preserve quotation rules your provider documents.
See Cloudflare DNS record basics for UI navigation patterns.
Why DNS changes lag, how TTL affects rollout, and how to verify TXT records globally.
DMARC can pass while folders still filter mail—check reputation, content signals, and mailbox-specific filters.
Why multiple SPF TXT strings break validation and how to merge includes into a single record.
Common causes of SMTP auth failures for application mail—credentials, ports, TLS, and provider policies.
Cookie choices
We use a required session cookie for login and optional analytics cookies for marketing pages. Read cookie policy