Link Custom Domain to iCloud Mail on iOS 15

This article outlines how custom domain hosting integrates with Apple's iCloud Mail infrastructure on iOS 15. You will learn how iOS initiates the setup, which Domain Name System (DNS) records are required to link your host with Apple's mail servers, and how Apple verifies ownership to enable secure email sending and receiving using your personalized domain.

Initiating Domain Setup on iOS 15

iOS 15 introduced the ability for iCloud+ subscribers to use custom email domains directly within the Apple ecosystem. The linking process begins on the device under Settings > [Your Name] > iCloud > iCloud Mail > Custom Email Domain.

When you add a domain, iOS prompts you to specify whether only you or you and your family will use the domain. Once entered, the operating system triggers a session with Apple's identity servers, which generates unique DNS configuration records specifically mapped to your Apple ID.

The Required DNS Records for iCloud Mail

To direct incoming mail to iCloud and authorize Apple to send messages on behalf of your domain, your domain registrar or hosting provider must be configured with three main types of DNS records:

  1. MX (Mail Exchange) Records: These records route incoming email traffic to Apple's mail servers.

    • Host/Name: @ (or leave blank depending on the host)
    • Points to / Target: mx01.mail.icloud.com. (Priority 10)
    • Points to / Target: mx02.mail.icloud.com. (Priority 10)

  2. TXT Records for Ownership and SPF:

    • Ownership Verification: Apple provides a unique TXT record (e.g., apple-domain=...) that proves you control the domain.
    • Sender Policy Framework (SPF): This prevents email spoofing by declaring iCloud as an authorized sender.
      • Host/Name: @
      • Value: v=spf1 include:icloud.com ~all

  3. CNAME Record for DKIM (DomainKeys Identified Mail): DKIM adds a cryptographic signature to outbound messages, ensuring email integrity and improving deliverability.

    • Host/Name: sig1._domainkey
    • Points to / Target: sig1.dkim.example.com.at.icloudmailadmin.com. (the target is dynamically mapped by Apple to match your specific domain)

Verification and Activation

Once you save the records at your domain host, return to the setup flow in iOS 15 and tap the verification button. Apple's servers will query your domain's authoritative nameservers to confirm that:

  • The unique verification TXT string is visible.
  • The MX records properly target Apple's mail exchangers.
  • The SPF and DKIM authentication signatures are properly mapped.

After the DNS changes propagate and are verified by Apple, iOS 15 activates the domain. You can then create personalized email addresses, which instantly link to your existing iCloud Mail inbox and sync across all signed-in Apple devices.