Add the mail records by hand
What each record Rykon Mail asks for does, where to add it, and how to combine it with records you already have.
Updated 2 min read
Once ownership is confirmed, Rykon Mail sets up your mail server and sending. That takes about a minute, then the panel Or add your mail records by hand lists every record with its status. Always copy the values from the console: they are unique to your domain. This table explains what each one is for.
| What it does | Type | Host | Value looks like |
|---|---|---|---|
| Delivers incoming mail to your mailboxes | MX | @ (the domain itself) | Priority 10, Rykon Mail's mail server |
| Says which servers may send as your domain (SPF) | TXT | @ | v=spf1 mx include:amazonses.com ~all |
| Signs mail sent from your mailboxes (DKIM) | TXT | dkim._domainkey | A long public key |
| Signs campaigns and other mail sent through Amazon SES (DKIM) | CNAME, three of them | A code followed by ._domainkey | The same code followed by .dkim.amazonses.com |
| Handles bounces for mail you send (return path) | MX | mail-from | Priority 10, a feedback-smtp address at amazonses.com |
| Authorises the return path (SPF) | TXT | mail-from | v=spf1 include:amazonses.com ~all |
| Tells inboxes what to do with mail that fails the checks (DMARC) | TXT | _dmarc | v=DMARC1; p=none; ... |
Where to add them
- In the DNS settings wherever your domain is managed: Cloudflare, GoDaddy, Namecheap, Squarespace, your web host or your IT provider. Add each record as a new record of the type shown.
- Most providers want the host as shown, without your domain on the end, and use
@for the domain itself. - In Cloudflare, set every record to DNS only, not proxied.
Records you already have
SPF
A domain can have only one SPF record. If you already have one (it starts v=spf1), add mx include:amazonses.com to it before its ~all rather than adding a second record. Two SPF records make every message fail.
DMARC
If your domain already publishes a DMARC policy, keep it. Rykon Mail accepts any published policy and never asks you to replace yours.
MX
Changing the MX record is the moment incoming mail switches to Rykon Mail. Remove your previous provider's MX records at the same time, or mail is split between the two. Plan it with Switch your mail over without losing any.
After you add them
The panel heading counts how many records are still to go, and each row shows its own status. When every record is published, the domain moves to Verify: Amazon SES, which signs the mail your domain sends, confirms your signing keys itself, usually within a few minutes. You can close the page; the domain turns to Ready on its own.