---
title: "Domain authentication | Prontuno"
description: "Prontuno generates the DNS records that prove your mail really comes from you, checks each one, and shows you exactly what is still missing."
canonical: https://prontuno.com/features/domain-authentication/
---

# Send from your own domain, authenticated.

**Domain authentication · SPF · DKIM · DMARC**

Prontuno generates the DNS records that prove your mail really comes from you, checks each one, and shows you exactly what is still missing.

[Request access](https://app.prontuno.com/get-started/) · [Read the domain setup guide](https://prontuno.com/docs/sending/verify-sending-domain/)

## DNS records

### Example DNS records

For `example.com`, the page shows three verified records and one pending record. Names are relative to the domain, as most DNS providers display them.

| Record | Type | Name | Value | Status |
| --- | --- | --- | --- | --- |
| Return path | CNAME | `pm7k` | `bounce.prontuno.net` | Verified |
| DKIM | CNAME | `prontuno1._domainkey.pm7k` | `prontuno1.pm7k.dkim.prontuno.net` | Verified |
| DKIM | CNAME | `prontuno2._domainkey.pm7k` | `prontuno2.pm7k.dkim.prontuno.net` | Verified |
| DMARC | TXT | `_dmarc` | `v=DMARC1; p=none;` | Pending |

Record names are generated for each domain.

## Authentication without the guesswork

Mailbox providers check whether a sender is authorized to use your domain. Prontuno sets you up to pass those checks.

### Records made for your domain

Each domain gets its own return path and two DKIM keys. They are CNAME records, so we manage the values behind them.

### Verification you can see

Every record shows its own verified status, so you know which one still needs attention.

### Your DMARC stays yours

Already have a DMARC record? Keep it. If not, we give you a monitoring-only policy to start with.

## Set up DNS the way your team works

DNS is often managed by a different person or team than the one setting up email, so there is more than one way to publish the records.

### What each record does

| Record | Type | Purpose |
| --- | --- | --- |
| Return path | CNAME | Routes bounces back to Prontuno and aligns SPF with your domain. |
| DKIM key 1 | CNAME | Publishes the key mailbox providers use to verify your message signatures. |
| DKIM key 2 | CNAME | A second DKIM key, also published and managed by Prontuno. |
| DMARC | TXT | Tells mailbox providers what to do with mail that fails authentication. |

### One-click setup on Cloudflare

When a domain’s DNS is hosted on Cloudflare, every record can be added in a few clicks without copying values.

### Records sent to your DNS admin

The dashboard can email the records and setup instructions to whoever manages your DNS.

### Subdomains supported

A subdomain such as mail.example.com can be authenticated on its own, keeping transactional mail separate from the rest of your mail.

### Free DNS checkers

Prontuno’s free tools check SPF, DKIM, and DMARC records for any domain.

[Try the free DNS tools](https://prontuno.com/tools/)

## Authenticate a sending domain

1. Add your domain in the Prontuno dashboard.
2. Publish the DNS records, or connect Cloudflare to publish them for you.
3. Start sending once every record shows as verified.

[Read the domain setup guide](https://prontuno.com/docs/sending/verify-sending-domain/)

## Explore more of Prontuno

- [Email API](https://prontuno.com/features/email-api/) — Send email with one HTTP request.
- [Webhooks](https://prontuno.com/features/webhooks/) — Get delivery events in real time.
- [SMTP relay](https://prontuno.com/features/smtp-relay/) — Connect existing apps over SMTP.
- [Dedicated IP](https://prontuno.com/features/dedicated-ip/) — An IP reserved for your team.

## Request access

Ready to send with Prontuno? Request access and tell us about your sending needs. Applications are reviewed within 24 hours.

[Request access](https://app.prontuno.com/get-started/)