How to use a custom domain with iCloud Mail

iCloud Mail provides advanced spam filtering and automatic synchronisation across Apple devices. Connecting your custom domain to iCloud Mail gives you professional email addresses while keeping your inbox separate from your hosting package.

You will configure iCloud Mail on your device, add your custom domain through iCloud+ settings and update DNS records to route email through Apple’s servers. Once complete, your custom domain email works across all your Apple devices with no additional setup required.

Enable iCloud Mail on your device

iCloud Mail must be active on at least one device before you can add a custom domain. This creates your iCloud email account and prepares it to receive mail from your domain.

iOS or iPadOS

1. Open Settings.
   Tap the grey cogwheel icon on your home screen.
2. Access your Apple ID settings.
   Tap your name at the top of the Settings screen.
3. Select iCloud.
   Scroll down and tap iCloud from the list of services.
4. Enable Mail.
   Toggle the Mail switch to the on position. If prompted, tap Create to set up your iCloud email address. This activates iCloud Mail on your device.

macOS

1. Open System Preferences.
   Click the Apple menu in the top-left corner and select System Preferences.
2. Access your Apple ID settings.
   Click your Apple ID name at the top of the System Preferences window.
3. Select iCloud.
   Click iCloud in the left sidebar.
4. Enable Mail.
   Tick the checkbox next to Mail. This activates iCloud Mail on your Mac.

Windows

1. Download iCloud for Windows.
   Visit the Microsoft Store and download the iCloud application.
2. Restart your computer.
   Once installation completes, restart Windows to finish the setup process.
3. Open iCloud.
   Launch the iCloud application from your Start menu.
4. Sign in with your Apple ID.
   Enter your Apple ID credentials when prompted.
5. Enable Mail.
   Tick the Mail checkbox and click Apply. This activates iCloud Mail on your Windows computer.

Add your custom domain to iCloud

You configure custom domains through the iCloud web interface. This process generates the DNS records you need to route email through Apple’s servers.

1. Log in to iCloud.
   Visit iCloud.com and sign in with your Apple ID. You may need to approve the login on another Apple device.
2. Open Account Settings.
   Click Account Settings from the main iCloud page.
3. Access custom domain settings.
   Scroll down to the Custom Email Domain section and click Manage. You can configure your domain for personal use or share it with family members.

4. Enter your domain name.
   Type your domain name in the field provided. Do not include www or any subdomain prefix.

5. Add existing email addresses (optional).
   If you already have email addresses on your domain, add them now. Otherwise, click Continue to proceed.

6. Review DNS requirements.
   iCloud displays the DNS records you need to add to your domain. Keep this page open while you configure your DNS settings.

Configure DNS records

DNS records tell email servers where to deliver mail for your domain. You need to add five records that point your domain to Apple’s mail servers and verify domain ownership.

The exact values for some records are unique to your domain and provided by iCloud during setup. Copy these values from the iCloud interface and use them in the following steps.

Add MX records

MX records direct incoming email to Apple’s mail servers. You need to add two MX records with equal priority.

1. Log in to cPanel.
   Access your hosting control panel at yourdomain.co.uk/cpanel replacing yourdomain.co.uk with your actual domain.
2. Open Zone Editor.
   Scroll to the Domains section and click Zone Editor.
3. Select your domain.
   Find your domain in the list and click Manage.
4. Add the first MX record.
   Click Add Record and select MX from the type dropdown. Enter your domain name in the Name field, mx01.mail.icloud.com in the Mail Server field and 10 in the Priority field. Click Add Record to save.
5. Add the second MX record.
   Repeat the previous step using mx02.mail.icloud.com as the mail server. Keep the priority at 10. This provides redundancy if one mail server is unavailable.

Add verification TXT record

The verification TXT record proves you own the domain. iCloud provides a unique value during setup that you must copy exactly.

1. Add a TXT record.
   In Zone Editor, click Add Record and select TXT from the type dropdown.
2. Enter the verification value.
   Copy the verification string from the iCloud setup page and paste it into the TXT Data field. Enter your domain name in the Name field. Click Add Record to save.

Add SPF record

The SPF record authorises Apple’s servers to send email on behalf of your domain. This prevents other mail servers from rejecting your messages as spam.

1. Add a TXT record for SPF.
   Click Add Record and select TXT from the type dropdown.
2. Enter the SPF value.
   Enter your domain name in the Name field and v=spf1 include:icloud.com ~all in the TXT Data field. Click Add Record to save.

Add DKIM record

The DKIM record adds a digital signature to outgoing email. Receiving servers verify this signature to confirm messages genuinely came from your domain.

1. Add a CNAME record.
   Click Add Record and select CNAME from the type dropdown.
2. Enter the DKIM values.
   Enter sig1._domainkey in the Name field. Copy the DKIM target from the iCloud setup page and paste it into the CNAME field. This typically follows the format sig1.dkim.yourdomain.co.uk.at.icloudmailadmin.com. Click Add Record to save.

Complete setup in iCloud

DNS changes take time to propagate across the internet. Once propagation completes, iCloud can verify your records and activate email delivery.

1. Wait for DNS propagation.
   DNS changes typically propagate within 24 hours but can take up to 48 hours. You can check propagation status using online DNS lookup tools.
2. Verify DNS records.
   Return to the iCloud custom domain setup page and click Finish Setup. iCloud checks your DNS records and confirms they are configured correctly.
3. Create email addresses.
   Once verification completes, you can create email addresses using your custom domain. These appear in the Mail app on all your Apple devices automatically.

Troubleshooting

DNS verification fails

iCloud cannot verify your DNS records if they contain errors or have not propagated yet.

• Check each record matches the values provided by iCloud exactly, including trailing dots where shown.
• Wait 24-48 hours after adding records before attempting verification.
• Use a DNS lookup tool to confirm your records are visible globally.
• Remove any existing MX records for your domain before adding the iCloud MX records.

Email not arriving

Missing or incorrect DNS records prevent email delivery to your custom domain.

• Verify MX records point to mx01.mail.icloud.com and mx02.mail.icloud.com with priority 10.
• Check the SPF record includes include:icloud.com in the value.
• Confirm the DKIM CNAME record points to the correct iCloud target.
• Test email delivery by sending a message from another email account to your custom domain address.

Custom domain option not available

Custom domain support requires an active iCloud+ subscription.

• Verify your iCloud+ subscription is active in Settings > Apple ID > iCloud > Manage Storage.
• Free iCloud accounts cannot use custom domains. Upgrade to iCloud+ through your device settings.
• Family sharing members can use custom domains if the family organiser has iCloud+.

Further reading on email authentication

Email authentication protocols protect your domain from spoofing and improve deliverability. SPF, DKIM and DMARC work together to verify that messages claiming to come from your domain are legitimate. Understanding these protocols helps you troubleshoot delivery issues and maintain your sender reputation.

SPF (Sender Policy Framework) lists which mail servers can send email for your domain. When you add include:icloud.com to your SPF record, you authorise Apple’s servers to send on your behalf. Receiving servers check this record before accepting messages. The SPF specification defines how servers should interpret these records.

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to message headers. Apple’s mail servers sign outgoing messages using a private key, and receiving servers verify the signature using the public key published in your DKIM DNS record. This proves the message was not altered in transit. The DKIM standard explains the technical implementation.

DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM by telling receiving servers what to do when authentication fails. You can configure DMARC to quarantine or reject suspicious messages. DMARC also provides reports showing who is sending email using your domain.

Wrapping up

Your custom domain now delivers email through iCloud Mail. You enabled iCloud Mail on your devices, added your domain through iCloud+ settings and configured DNS records to route email through Apple’s servers. Your email addresses work across all Apple devices with automatic synchronisation.

Test email delivery by sending messages to your new addresses from external accounts. Check that replies work correctly and attachments send without issues. Our domain registration service includes DNS management tools for configuring email and other services.