SPF and DKIM for Proton Mail

Proton Mail needs include:_spf.protonmail.ch in your SPF record. Add it to the TXT record on your domain's root. Check your domain below once the records are in.

  • Free
  • No Sign-Up
  • Live Lookup

Examples:

SPF Checker

Proton Mail records

SPF Includeinclude:_spf.protonmail.ch
SPF Record (on Its Own)v=spf1 include:_spf.protonmail.ch ~all
With Another Providerv=spf1 include:_spf.protonmail.ch include:other.example ~all
DKIM Selectorsprotonmail, protonmail2, protonmail3 (CNAME)
Starter DMARC (_dmarc)v=DMARC1; p=none; rua=mailto:[email protected]

Add it to the TXT record on your domain's root.

DKIM: Three CNAME records, protonmail._domainkey, protonmail2._domainkey and protonmail3._domainkey, with the values from Proton's domain settings.

A domain can have only one SPF record. If you already send through another service, add the include to your existing record rather than creating a second one, and keep the total under 10 DNS lookups.

Once SPF and DKIM pass, add a DMARC record at _dmarc with p=none and a reporting address, read the reports for a couple of weeks, then move to quarantine and reject.

Other Email Providers

Google WorkspaceMicrosoft 365Namecheap Private EmailFastmailProton MailiCloud+ Custom Email DomainAmazon SESSendGridMailgunResendMailchimp

Questions

What is the SPF record for Proton Mail?
v=spf1 include:_spf.protonmail.ch ~all. If you also send through other services, add their includes to the same record.
Where do I find the DKIM record for Proton Mail?
Three CNAME records, protonmail._domainkey, protonmail2._domainkey and protonmail3._domainkey, with the values from Proton's domain settings.
Do I need DMARC with Proton Mail?
Yes. Gmail and Yahoo require DMARC for bulk senders, and it is what stops others sending as your domain. Start with p=none and move to reject.
How long do new SPF and DKIM records take to work?
As soon as resolvers see them, usually within minutes; at most the old record's TTL. Use the checker above to confirm.

Free Tools

More tools

All Tools
SPF CheckerValidate an SPF record and count its DNS lookups against the limit of 10.DKIM CheckerFind and validate a domain's DKIM public keys by selector.DMARC CheckerRead a domain's DMARC policy, reporting address and alignment.Reverse DNS LookupPTR record for an IP, and whether it is forward-confirmed.

Your customers' VMs sending spam?

Frabs spots outbound spam from any VM within seconds and stops it, before your IPs end up on a blocklist.

Start Free TrialTry the Demo