SPF, DKIM, DMARC setup: Cloudflare & Microsoft

This article will help you set up DNS records if you’re using Microsoft for your email accounts and the domain is hosted on Cloudflare.

We’ll cover -

Adding your domain to Microsoft & SPF setup

DKIM setup

DMARC setup

1. Log into your Microsoft admin account.

2. On the homepage, search for “Domains” using the search bar.

3. Click on “Add domain”.

4. Enter the “Domain name” and click on “Use this domain”.

5. The next step is to verify the domain. Click “Verify”.

6. Now, go to your Cloudflare account and check if MX record, SPF, and CNAME DNS records are available; if not, add the records for the domain as advised by Microsoft.

1. Log into your Microsoft admin account.

2. On the homepage, search for “Dkim” using the search bar.

3. Click on the DKIM page shown in the results.

4. Click on the domain for which you want to configure DKIM.

5. Slide the toggle to Enable. You will see a pop-up window, click on the "Create DKIM keys" button.

6. You will get the “Publish CNAMEs” pop up. Copy the host name and value.

7. Go to Cloudflare→ click “Manage” for the domain to update the records.

8. Click on “Add new record”.

9. Enter type, host name, and value.

10. Click “Save”. This will take a few minutes.

11. Go back to Microsoft and enable the “Sign messages for this domain with DKIM signatures.”

This completes the DKIM setup.

1. You have to create a DMARC record using a DMARC record generator and then input the same to Cloudflare.

​2. Use https://easydmarc.com/tools/dmarc-record-generator to generate your DMARC record.

3. Now, go to Cloudflare.

4. Navigate to your domain's DNS management.

5. Click on “Add record” to add the DMARC record.

6. Enter the following details -

7. Click “Save”. The DMARC record will be created successfully.

Now that the authentication protocols are set up, you can go ahead and create email accounts on this domain.