How to use a custom domain from Gandi with Proton Mail

Reading: 9 mins
Category: Domain setup

If you’ve purchased a custom domain from Gandi (such as yourdomain.com), you can use it to send and receive emails with your Proton Mail account (for example, using the email address [email protected]).

To do this, you must have a paid Proton Mail plan. The number of custom domains you can use with Proton Mail depends on your plan.

Proton Mail Plus: 1 custom domain
Proton Unlimited: 3 custom domains
Proton Visionary (legacy users only): 10 custom domains
Proton Mail Essentials: 3 custom domains
Proton Mail Professional: 10 custom domains
Proton Business Suite: 15 custom domains (by default with the option to add more)

The procedure for setting up your custom domain for use by your Proton Mail account is as follows:

Add your domain to your Proton Mail account.
Verify your domain so that Proton knows it is genuinely yours.
Create new users and add team members to your account.
Configure your domain registrar’s DNS records so that Proton Mail handles the emails sent and received using that domain.
Set up your email address.

Add your domain

1. In your browser, log in to your Proton Mail account and select Settings → All settings → Proton Mail → Domain names → Add domain.

2. Enter your domain name and click Next. You might be asked to re-enter your Proton Mail password for security reasons.

Verify your domain

The first thing you have to do after adding a custom domain name is to show Proton Mail that you control this domain. You can do this by adding a TXT record with a unique code that Proton Mail has generated to your domain’s DNS records in your registrar’s domain management portal.

Proton Mail servers will then look up all the TXT records for your domain and see if any match the verification code. If we find a match, then verification succeeds, and you can move on to the next steps.

Once you click Next, you will be taken to the Verify tab. You can also reach it from Settings → All settings → Proton Mail → Domain Names → Domain by clicking on the Actions → Review button and selecting the Verify tab.

In the Verify tab, your Host Name (@) and TXT verification record are shown to the right of your newly added domain.

Now:

1. Log in to your Gandi account, go to Domain, and select the domain you want to use.

2. In the DNS Records tab, select Add.

3. Create the following record:

Type: TXT
TTL: Select a low value to update your DNS record faster.
Name: @ (If the @ value isn’t accepted, enter your domain instead.)
Text Value: Copy and paste the value from the Value / Data / Points to the entry in the Verify tab of the Proton Mail Edit Domain console.

Save the record when you’re done.

Wait a few minutes, then click Next in the Proton Mail Edit domain console to trigger a DNS check by our servers. If it succeeds, you can now move on to the next step (creating an MX record). If it didn’t succeed, don’t worry; the process can take a while, so try again in an hour.

Create an organization

Now that you have a domain, you can create an organization(new window) and add users(new window) to it.

Share login information with your team members

Before you change your MX records, we recommend informing your team members of the upcoming change. After you change the MX records, emails will be delivered to their Proton Mail inboxes instead of their old inboxes.

Create MX records in Gandi to activate your domain

Once your domain is verified, click Next to go to the MX tab (or come back to this page later and simply go directly to the MX tab). The mail exchanger (MX) record is vital for email operation: it tells the internet which server(s) should receive your domain’s email.

If you are setting up a new domain, go ahead and add the specified MX records in your Gandi control panel. To do this:

1. Go to DNS Records → Add new record.

2. Enter and save the following values:

Type: MX
TTL: Select a low value to update your DNS record faster.
Name: @ (If the @ value isn’t accepted, enter your domain instead)
Priority: 10
Hostname: mail.protonmail.ch.

Warning: The final dot (.) at the end is important. If you leave this out, your record will not work.

3. Create a second MX record using these values:

Type: MX
TTL: Select a low value to update your DNS record faster.
Name: @ (If the @ value isn’t accepted, enter your domain instead)
Priority: 20
Hostname: mailsec.protonmail.ch.

Warning: The final dot (.) at the end is important. If you leave this out, your record will not work.

If your domain currently has existing mailboxes, we recommend adding all used email addresses before switching your MX records to Proton Mail to ensure a smooth transition. We describe how to do this below.

This will help you avoid disruption to your email delivery because Proton Mail will only accept mail for addresses that you have added. mail.protonmail.ch points to Proton Mail’s mail servers, so once you have made this change, you are telling the internet to send email for your domain to your Proton Mail account.

If you have MX records for multiple services, the email will be delivered to the service with the highest priority (lowest value). If you have other MX records, you should either delete them or make sure mail.protonmail.ch‘s priority is a smaller number (higher priority) than the other MX records.

Again, it may take up to a day for MX changes to propagate, and email may still go to your old MX during this transition. Once we detect your domain’s top MX record is pointing to Proton Mail, the MX tab will show a green tick icon.

Set up your addresses

If you are changing an existing domain to deliver emails to your Proton Mail inbox, you should set up all existing email addresses before filling in the MX records (as described above).

Select the Address tab → Add address.

This will take you to the Organization section of your Proton Mail accounts page. Click on Add Address to create a Proton Mail email address using your custom domain. If you have more than one custom domain, you can select which one to use from the dropdown list.

Create SPF, DKIM, and DMARC records

For security reasons, we recommend adding SPF and DKIM records. Setting up DMARC is an optional, advanced feature.

Learn more about SPF, DKIM, and DMARC(new window)

Setting up SPF and DMARC records in the Gandi console is similar to setting up TXT records.

1. Go to DNS Records → Add new record.

2. Enter and save the following values:

Type: TXT
TTL: Select a low value to update your DNS record faster.
Name: @
Value: Copy and paste the value from the Value / Data / Points to column of the SPF tab in the Proton Mail Edit Domain console.
Priority: 10

Click Validate when you’re done.

3. Add another record with the following values and click Validate when you’re done.

Type: CNAME
TTL: Select a low value to update your DNS record faster.
Name: protonmail._domainkey
Hostname: Copy and paste the value from the Value / Data / Points to column of the DKIM tab in the Proton Mail Edit Domain console.

4. Repeat step 3 above to create an additional two CNAME records using the following values (for a total of three CNAME records):

Type: CNAME
TTL: Select a low value to update your DNS record faster,
Name: protonmail._domainkey, protonmail2._domainkey, and protonmail3._domainkey
Hostname: Copy and paste the value from the first Value / Data entry tab in the DKIM tab of the Proton Mail Edit Domain console

5. Add a new DMARC record using the following values.

Type: TXT
TTL: Select a low value to update your DNS record faster
Name: _dmarc
Text: Copy and paste the value from the Value / Data / Points to entry in the DMARC tab of the Proton Mail Edit Domain console.

Click Validate.

You can now send and receive emails using your custom domain from Gandi with your Proton Mail account!

Setup guides for other domain registers are also available for:

If you own a domain from a different registrar, please see our generic guide How to use a custom domain with Proton Mail(new window).