Sending domains and DNS
Add a sending domain, publish its DKIM, SPF, Return-Path and DMARC records manually or with one click, and verify it.
Before you can send from an address such as noreply@example.com, you add example.com as a sending domain and publish its DNS records. Yeap Cloud then signs every message with your domain's DKIM key, so receivers can check that the mail really comes from you.
Add a sending domain
- Open Email sending, click the stream, and go to the Sending domains tab.
- Click Add domain.
- Enter the domain that will appear after the
@in your From address, such asexample.com. A subdomain such asmail.example.comalso works and keeps your sending reputation separate from your main domain. - Select Shared by all streams if every stream on your account should be able to send from this domain. Leave it clear to bind the domain to this stream only.
- Click OK. The domain is added and its DNS panel opens.
The counter next to Add domain shows how many domains the stream uses out of its plan limit. When the limit is reached, the button is disabled.
Keep in mind:
- A domain belongs to one account. If another Yeap Cloud account has already verified the domain, you can't add or verify it. The console shows already verified by another account. If you believe this is wrong, contact support.
- Platform domains (
yeapcloud.netandyeap.cloud) can't be used as sending domains. - You send from verified domains only. The From address of every message must be at a verified domain that the stream can use. Otherwise the message is refused.
Shared or bound to one stream
| Setting | Which streams can send from it | Counts toward |
|---|---|---|
| Shared by all streams on | Every stream on your account | The domain limit of every stream |
| Off (bound) | Only the stream it's bound to | That stream's domain limit |
You can change this later with the Shared by all streams switch in the domain's DNS panel. A shared domain is marked Shared in the list. Making a domain shared fails if any of your streams has no room left in its domain limit.
DNS records
The DNS panel lists the records for your domain with their exact values. Copy them from the console: the DKIM key is unique to each domain.
| Purpose | Type | Name | Value | Required |
|---|---|---|---|---|
| DKIM signature | TXT | tm1._domainkey.example.com | v=DKIM1; k=rsa; p=<public key> | Yes |
| SPF (sender authorization) | TXT | example.com | v=spf1 include:_spf.tm.yeapcloud.net ~all | Recommended |
| Return-Path (bounces) | CNAME | bounce.example.com | rp.tm.yeapcloud.net | Recommended |
| DMARC (sending policy) | TXT | _dmarc.example.com | v=DMARC1; p=none; adkim=r; aspf=r | Recommended |
- DKIM is the record that matters for sending. The domain becomes verified as soon as this record is live, and every message is signed with it, so DMARC passes through DKIM alignment.
- SPF: a domain can have only one SPF record. If
example.comalready has av=spf1record (for example for Domain Mailbox or another sending service), addinclude:_spf.tm.yeapcloud.netto that record instead of creating a second one. - DMARC: if the domain already has a DMARC record, keep it. The suggested
p=nonevalue only starts monitoring. Move top=quarantineorp=rejectonce you've confirmed that all your legitimate mail passes.
One-click DNS (Yeap Cloud DNS)
If the domain is hosted in Yeap Cloud DNS, the panel shows Hosted in Yeap DNS and compares each record with what's in your zone:
- Check the plan: records that are missing are marked as new, an existing SPF record is shown with the merged value, and an existing DMARC record is left alone.
- Click Add in one click and confirm. The records are written to your zone.
- About three seconds later, verification runs automatically.
If the domain's name servers don't point to Yeap DNS yet, the panel warns you. The records only resolve once the name server change has taken effect.
Manual DNS (other providers)
If the domain is hosted elsewhere, the panel shows Add these at your domain's DNS provider:
- Sign in to your DNS provider and create the records exactly as shown. Some providers want only the host part in the name field, for example
tm1._domainkeyinstead oftm1._domainkey.example.com. - Wait for the records to propagate. This usually takes a few minutes, but depends on your provider and TTLs.
- Click Check public DNS to see what the public DNS returns, then click Verify.
Verification status
| Status | Meaning |
|---|---|
| Verified | The DKIM record is live. You can send from this domain. |
| Unverified | The DKIM record wasn't found yet. Check the record and click Verify again. |
Next to the status, the DKIM, SPF, Return-Path and DMARC tags turn green when the matching record is found. Last checked shows when the domain was last checked.
Verification runs when you click Verify. If you remove or change the DKIM record and verify again, the domain goes back to Unverified and you can no longer send from it.
Delete a domain
On the domain's row, click Delete and confirm. You can't send from the domain afterwards. If you add it again later, a new DKIM key is generated and you must update the DKIM record in DNS.