How to authenticate your domain name for email sending

📅 Last updated: June 2026

⏱ 4 min read

✅ All plans

In this article, you will learn how to authenticate your custom domain name for email sending. Proper domain authentication is a critical step in establishing a positive sender reputation and ensuring your emails reach your contacts' primary inboxes.

What you will need:

A SystemeScale account
A custom domain name registered with a DNS hosting provider

⚠️

Important Authentication Rules

Authentication of a custom domain name is mandatory to send emails from SystemeScale.
The domain you want to authenticate must have an active website linked to it. If the domain leads to a 404 error page, email providers may block your emails. For example, if your domain is sio-team.live, it must resolve correctly; otherwise, sending from info@sio-team.live will result in server blocking.
You cannot authenticate domains from free, personal email providers (e.g., Gmail, Yahoo, ProtonMail). Only custom domains can be authenticated.

Step 1: Access your Domain Settings

First, you need to generate your unique DNS records directly from your workspace dashboard.

Navigate to Email Settings

Hover over your profile picture in the top-right corner and click on Settings. In the left-hand settings menu, click on Emails.

Trigger the authentication process

Scroll down to the Domains section, then click the text link labeled: "Click here to authenticate your domain and display its information in your email header, which will help improve your email delivery rates".

Generate your DNS records

In the popup that appears, enter your naked domain name (without the "www" prefix, e.g., sio-team.live). Click Save. The system will generate three CNAME records and one DMARC record. These must be integrated into the DNS settings of your external domain host.

For more details on properly configuring DMARC, please reference our guide: How to create a DMARC record.

Step 2: Log in to your domain host

Next, start by accessing your external domain host account. You will need to add the provided CNAME records to your domain's DNS zone manager. If you encounter any difficulties navigating their interface, please contact your host's specific support team for guidance.

Note: In this article, we will be using GoDaddy as a visual example. While we use GoDaddy, the process is structurally identical across most major hosts. Check the related articles at the bottom of this page for provider-specific guides.

Open your DNS management zone

Once logged into your provider, navigate to the specific domain you want to authenticate, click on DNS records, and then select Add new record.

Add the three CNAME records

Select the CNAME type option for adding the first three records. Return to the list generated in your SystemeScale account to copy the required inputs.

Important rules for entering records:

In your host's Name field, paste the value from SystemeScale. Enter only the part before your domain name (e.g., if the value is si942517.sio-team.live, enter only si942517).
In the Value field, paste the exact target provided by SystemeScale. Add a period (.) at the absolute end of the value if your host requires it (e.g., inbound.systeme.io.).

Here is how the three CNAME records should look inside your provider's DNS zone (these specific values are just examples):

NAME (host): si942517 ➔ VALUE: inbound.systeme.io.
NAME (host): systemeio1._domainkey ➔ VALUE: key1.systeme.io.
NAME (host): systemeio2._domainkey ➔ VALUE: key2.systeme.io.

Click Save to validate each record individually.

Add the DMARC TXT record

Select the TXT option in your DNS manager to add the DMARC protocol. Return to your SystemeScale dashboard to copy the generated text string.

Here is how the line must be mapped (example values):

Name: _dmarc
Value: v=DMARC1; p=none; rua=mailto:example@gmail.com

Click Save to validate.

Step 3: Verifying your configuration

After inserting the records, you should proactively check that your CNAME records are correctly configured using a public DNS checker tool.

📌

How to Check Your Records

To verify your configuration, you must enter the full CNAME string (including your root domain name, e.g., systemeio1._domainkey.sio-team.live) into the checker's search bar.

If you see a green checkmark next to the exact target value for all three of your CNAME records, it confirms that your domain name has successfully propagated and authenticated. If you want secondary confirmation, you can also contact the SystemeScale support team for verification on our end.

However, if any CNAME records appear in red, return to your DNS settings and check for trailing spaces, missing periods, or syntax errors. If you cannot resolve the issue, please contact support and include a full, uncropped screenshot of your DNS records panel.

Finally, check that your DMARC record has been successfully added by searching with your root domain name using a public DMARC checker tool.

💡

Final Required Action

To actually send emails using your newly authenticated domain, you must successfully confirm the exact sender email address associated with that domain. Follow the steps outlined in this article: How to confirm your email sender address.

Was this article helpful?

📄 Why aren't my emails being sent? → 📄 How to confirm your email sender address → 📄 How to improve the deliverability of my emails (advanced tips) → 📄 Why do my emails arrive in the Gmail 'promotions' tab? → 📄 How to authenticate your domain name on GoDaddy → 📄 How to authenticate your domain name on Namecheap → 📄 How to authenticate your domain name on Cloudflare → 📄 How to authenticate your domain name on Infomaniak → 📄 How to authenticate your domain name on Hostinger → 📄 How to authenticate your domain name on IONOS → 📄 How to authenticate your domain name on LWS →