Use your own domain with Scroogle Mail

About 10 minutes, plus DNS propagation Included on every plan Last updated: June 2026

Your address doesn't have to end in @scrooglemail.com. Bring your own domain and become you@yourname.co.uk - with all the same encryption, zero-access storage and tracker blocking underneath. Custom domains are included on every plan: 1 domain on Essential, 3 on Plus, and 3 per person on Family.

You keep your domain exactly where it is. We're not a registrar and we don't want to be - your domain stays with whoever you bought it from, and we just need a handful of DNS records added there. Typical setup takes about ten minutes of actual work; the rest is waiting for DNS changes to propagate, which is usually under an hour but can take up to 48 hours.

Everything below happens in two places: your registrar's DNS control panel (where you add records) and Settings > Domains in Scroogle Mail (where you add the domain and check its status). If your DNS is hosted somewhere other than your registrar - Cloudflare, for instance - make the changes wherever your nameservers actually point.

1Step 1
Verify you own the domain

First we need proof the domain is yours, so nobody else can claim it. In Settings > Domains, click Add a domain, type your domain name, and we'll show you a unique verification code. Add it at your registrar as a TXT record:

TypeHostValueTTL
TXT @ scroogle-verify=8f3ka92mz1 3600

The value above is an example - use the code shown in your own Settings > Domains page. @ means the bare domain itself; some control panels want you to leave the Host field blank instead, or to type the full domain name.

Once the record is in, go back to Settings > Domains and click Verify. If it doesn't pass first time, that's almost always propagation - give it an hour and try again. The verification record is only checked during setup, but it's harmless to leave in place afterwards.

2Step 2
Receive mail on your domain

MX records tell the rest of the internet where mail for your domain should be delivered. Add both of these - the second is a backup route, and mail servers pick the lowest priority number first:

TypeHostValuePriorityTTL
MX @ mx1.scrooglemail.com 10 3600
MX @ mx2.scrooglemail.com 20 3600

Still moving mail across from another provider? Don't remove your old provider's MX records until your migration is complete, or new mail will start arriving at Scroogle Mail while your old mailbox is still your "real" one. Run the migration guide first, then swap the MX records as the final step. Both sets of MX records pointing at different providers at once means mail arrives unpredictably at either - avoid that state.

Once the MX records have propagated, mail sent to any address you've created on the domain lands in your Scroogle Mail inbox - encrypted to your key the moment it arrives, same as everything else.

3Step 3
Prove your mail is yours (SPF, DKIM, DMARC)

Three more records stop other people impersonating your domain, and stop your own messages landing in spam folders. In plain English:

  • SPF publishes a list of servers allowed to send mail as your domain - ours, in this case.
  • DKIM puts a cryptographic signature on every message you send, so receiving servers can check it wasn't tampered with and really came from your domain.
  • DMARC tells receiving servers what to do with mail that fails those checks - and where to send the reports.

Add the following records:

TypeHostValueTTL
TXT @ v=spf1 include:_spf.scrooglemail.com -all 3600
CNAME sm1._domainkey sm1.dkim.scrooglemail.com 3600
CNAME sm2._domainkey sm2.dkim.scrooglemail.com 3600
CNAME sm3._domainkey sm3.dkim.scrooglemail.com 3600
TXT _dmarc v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@scrooglemail.com; adkim=s; aspf=s 3600

Why three DKIM records?

Signing keys shouldn't live forever. We rotate DKIM keys regularly as a matter of hygiene, and because your records are CNAMEs pointing at us rather than the keys themselves, we can retire an old key and bring a new one into service without you touching your DNS ever again. Three records means there's always a current key, a next key, and headroom for rotation - set them once and forget them.

Does your domain already send mail from somewhere else? A website contact form, a newsletter tool, an old provider still winding down? Then start your DMARC record with p=none instead of p=quarantine. That's monitoring mode: nothing gets blocked, but the reports show you everything sending as your domain. Once the reports look clean - typically after a couple of weeks - tighten it to p=quarantine. Also note the strict -all in the SPF record above: if another service legitimately sends for you, add its include: to the same record rather than creating a second SPF record (a domain may only have one).

When all the records check out, the domain's status in Settings > Domains flips to Active, with a green tick against each record. You can then create addresses and aliases on the domain, and pick any of them as your From address when composing.

Catch-all addresses

A catch-all accepts mail sent to any address at your domain that doesn't already exist - typo@yourname.co.uk, madeupname@yourname.co.uk, all of it - and delivers it to a mailbox you choose. Without one, mail to a non-existent address simply bounces back to the sender.

The trade-off is spam. Spammers guess addresses by the dictionary, and a catch-all obligingly accepts every guess. On a domain that's been around a while, expect a noticeable bump in junk. Our filters catch most of it, but if you only need a handful of addresses, explicit aliases are the tidier tool - and they tell you exactly who leaked which address.

Catch-all is included on Plus and Family plans; Essential covers explicit addresses and aliases only. To enable it per domain:

  1. Go to Settings > Domains > your domain > Catch-all.
  2. Switch it on and pick the address that should receive the strays.
  3. Save. It takes effect immediately - no DNS changes needed.

How catch-all interacts with aliases

Exact matches always win. If shopping@yourname.co.uk exists as an address or alias, mail to it goes where that alias says - the catch-all only receives mail for addresses that don't exist. And if you delete an alias, the catch-all quietly starts collecting its mail instead of bouncing it, which is handy if you binned an alias slightly too enthusiastically. One thing a catch-all deliberately doesn't do: resurrect mail for an alias you've blocked. Blocked means blocked.

Troubleshooting

I've added the records but the domain still shows "Unverified"
Nine times out of ten this is DNS propagation: changes can take up to 48 hours to be visible worldwide, though most registrars manage it within the hour. The TTL on your records is the clue - if your registrar defaults to a TTL of 86400 (24 hours), older cached answers can hang around that long. Check the record has actually saved at your registrar, make sure the Host field is right (@ vs blank vs the full domain - registrars differ), wait, and click Verify again. If it still fails after 48 hours, write to support@scrooglemail.com with your domain name and we'll look up what your DNS is actually serving.
Who hosts my website? Will this break it?
We only touch mail. Your website is controlled by your domain's A/AAAA (and sometimes CNAME) records, and this guide doesn't ask you to change any of them - your site stays exactly where it's hosted today, with whoever hosts it. MX, SPF, DKIM and DMARC records route and authenticate email only. The one thing to double-check: don't delete existing records while adding ours.
Can I use multiple domains with one mailbox?
Yes. Plus includes up to 3 custom domains, Family up to 3 per member (Essential includes 1), and addresses on all of them land in the same unified inbox. Repeat the steps on this page for each domain, then create addresses or aliases per domain in Settings > Domains. When composing, you choose which address to send from - replies automatically go out from whichever address received the message.
What happens to my domain if I cancel Scroogle Mail?
The domain itself is unaffected - you own it via your registrar, and we never held it in the first place. What stops is mail delivery: once your account closes, our servers stop accepting mail for your domain, and mail to it will bounce until you point the MX records at a new provider. So before you cancel, set up the domain with your next provider, swap the MX/SPF/DKIM/DMARC records, and export your mail. Remember there's a 30-day money-back guarantee if you're cancelling early on.

Next steps

Domain live? Bring your old mail over with the migration guide - or if a record refuses to behave, a human will happily read your DNS with you.