Authenticate email messages using DNS

To configure email authentication with using domains, complete the following steps.

1. From the Twilio Console, go to the left navigation rail > Products & Services > Email > Domains. The Domains page appears.
2. Click Create authenticated domain. The Set up your domain page appears.
3. Type your chosen domain into the Domain box.
4. To configure optional settings, click Advanced Settings. The settings appear.
   1. Click Use custom return path.
      • Type a subdomain into Return path box.
   2. Click Use custom DKIM selector
      • Type the subdomain for your DomainKeys Identified Mail (DKIM) selector into DKIM selector box.
   3. Click Enable Valimail monitoring.
   4. Click Next. The Install DNS Records appears with two options: Automated setup and Manual setup.
      • Once you select an option, you can't go back and try to select the other option. Twilio Email removes the option from the Console.

If you choose Automated setup, follow these steps.

1. Click Automated Setup. Twilio checks for your DNS provider as shown in the Analyzing your domain modal.
2. If the Twilio Console finds your provider, the modal changes to display one button and four links.
   • If the display provider does match your known domain provider, click Authorize with <Provider>.
     1. A new window opens displaying the login page for your DNS provider.
     2. Click Authorize with <Provider>.
        • If your DNS Provider can integrate, the page changes to a permissions page on your DNS provider.
          1. Click Give Entri authorization to connect <your-domain>.
             • If this connection succeeds, the Twilio Console displays a modal with <your-domain> is now configured!
             • If this connection fails, the Twilio Console displays Flow closed. Click Try again.
          2. Click Done. The modal closes and the Domains page displays again.
        • If Domain Connect doesn't work with your DNS Provider, the Twilio Console changes to the manual setup.
          • If you click the back arrow, the modal changes to Select your domain provider.
   • If the displayed provider doesn't match what you know to be your domain provider, click Change provider. This should be a rare occurence.
     1. Choose a different provider from the Select your domain provider modal.
        View the supported DNS providers
     2. The Twilio Console tries to find your domain on this DNS Provider as before.
   • If you want to configure your domain authentication, click Go to our manual setup.
   • If you want someone else to configure your domain authentication, click Or forward login to someone else

To copy and paste the domain records into your DNS provider, use Manual setup.

The Twilio Console displays the Configure your domain manually by adding these records modal containing a table of DNS records and a dimmed confirmation button. These records cover the hosts and values that you need to add to your domain provider for your chosen domain.

The dimmed confirmation button displays I have copied 0/4 records. As you copy each set of record values, the first number increments.

If you choose Manual setup, follow these steps. The terms for host and value can differ among DNS Providers.

1. Click Log in into your domain provider to manage these settings.
2. In your DNS Provider site, create a record with the type of CNAME.
3. In the Twilio Console, click Copy to the right of the CNAME host.
4. Paste that value into the corresponding box in your DNS Provider site.
5. In the Twilio Console, click Copy to the right of the CNAME value. The first number in I have copied... button should increment.
6. Paste that value into the corresponding box in your DNS Provider site.
7. Repeat steps 2 to 6 twice.
8. In your DNS Provider site, create a record with the type of TXT.
9. In the Twilio Console, click Copy to the right of the TXT host.
10. Paste that value into the corresponding box in your DNS Provider site.
11. In the Twilio Console, click Copy to the right of the TXT value. The first number in I have copied... button should increment to 4 and the button becomes clickable.
12. Paste that value into the corresponding box in your DNS Provider site.
13. Click I have added 4/4 records above to my domain's provider.
14. Click Complete.

To delegate your domain authentication setup to a colleague, follow these steps.

1. The Share this link with a colleague modal displays.
2. Click Copy next to the domain listed for Send the link below to your colleague to complete the setup..
3. Check I have shared the link.
4. Click Continue. The Domains page appears and your chosen domain has a Status of Pending.

The Domain Authentication section displays a table with your added authenticated domain, its status, and the option to view or delete it.

• If the verification succeeded, the Status displays Verified.
• If the verification hasn't completed, the Status displays Pending. To check verification, click Verify.
• If the verification failed, the Status displays Failed.

To edit your existing authenticated domain, click the Eye icon next to your chosen domain. The <your-domain> page displays.

This page provides four settings:

• To check that your domain authenticates, click Verify Status.
• To turn on Valimail, click Enable Valimail.
• To delete your authenticated domain, click Delete.
  • The Are you sure you want to delete this authenticated domain? modal displays.
  • To confirm the deletion, click Delete.
  • To prevent the deletion, click Cancel.