This guide walks you through setting up DNS records provided by OneSignal to authenticate your sending domain. In most cases, DNS can be auto-configured from the OneSignal dashboard as described in the Email Setup guide.

​

Requirements

If you need to manually set up your sending domain DNS recordss, you must:

• Own the sending domain.
• Have access to DNS settings via your provider.

If you don’t own a domain, you can purchase one via the OneSignal dashboard or register through Cloudflare. This guide will use Cloudflare as an example but most DNS providers work the same.

​

Email DNS configuration

Complete the Email Setup steps until you’re prompted to add DNS records, then return here.

From the OneSignal dashboard, copy each DNS record:

In your DNS provider’s interface (e.g., Cloudflare), go to DNS > Records and add each record.

​

Email authentication methods

Correctly configuring DNS authentication helps ensure your emails are delivered and not flagged as spam. Here’s a breakdown of the DNS records you will add:

​

SPF (Sender Policy Framework)

Verifies the sending IP is authorized to send emails on your domain’s behalf.

✅ No extra action needed beyond adding the TXT record provided by OneSignal.

​

DKIM (DomainKeys Identified Mail)

Verifies the message’s content was not altered and was sent by you.

📌 The public key is included in the DNS record from OneSignal.

​

MX (Mail Exchange)

Receives email responses or bounces. Even if you’re only sending, these help avoid domain verification errors.

​

CNAME

Used for open, click, and unsubscribe tracking.

Ensure:

• Proxy is set to “DNS Only”
• Flattening is disabled

​

DMARC

Adds policy enforcement for SPF/DKIM failures.

​

Record configuration formats

​

TXT record

• Type: TXT
• Name: OneSignal “Hostname”
• Content: OneSignal “Value”
• TTL: Auto or lowest
• Priority: 10 (if required)

​

CNAME record

• Type: CNAME
• Name: OneSignal “Hostname”
• Target: OneSignal “Value”
• TTL: Auto or lowest
• Proxy: DNS only
• Flattening: Off
• Priority: 10 (if required)

​

MX record

• Type: MX
• Name: OneSignal “Hostname”
• Mail server: OneSignal “Value”
• TTL: Auto or lowest
• Priority: 10

​

DNS verification

After adding records:

1. Return to the OneSignal dashboard.
2. Click Check Records.

Verified records show green check marks.

⏱ Verification typically takes just a few minutes but can take up to 24 hours.

Use whatsmydns.net to check propagation if any records are pending.

🔍 If verification fails:

• Confirm the domain is correct.
• Double-check each record was added exactly as shown in the dashboard.