Skip to content
Docs

Your domain, on Cloudflare.

Two paths. If your domain’s DNS is already on Cloudflare, add Nexmail’s records with a token or by hand. If it is somewhere else, Nexmail can move it to Cloudflare for free and set everything up in the same step.

Last updated . Tested against the Cloudflare and Namecheap dashboards as of October 2026.

Which path is yours?

  • Your nameservers end in ns.cloudflare.com: your DNS is already on Cloudflare. Follow path A.
  • Anything else: your DNS is elsewhere. Add the records there (see every DNS host), or follow path B to move it to Cloudflare.

A. Your DNS is already on Cloudflare

Let Nexmail add the records (fastest)

On the records step, Nexmail shows Add them all for me with a box for a Cloudflare API token. Make the token from Cloudflare’s ready-made “Edit zone DNS” template:

  1. Open Cloudflare → My Profile → API Tokens (opens in a new tab) and click Create Token.
  2. Next to the "Edit zone DNS" template, click Use template.
  3. Check the Permissions row reads Zone, DNS, Edit. The template fills it in for you.
  4. Under Zone Resources, choose Include, then Specific zone, then your domain.
  5. Click Continue to summary, then Create Token.
  6. Copy the token. Cloudflare shows it only once.
The template’s permission row: Zone, then DNS, then Edit. You do not need to change it.

Paste the token into Nexmail and click Add records. Nexmail adds each record as DNS only, checks them, and forgets the token. It is never stored.

Or add them by hand

  1. Sign in to Cloudflare and pick your domain.
  2. Open DNS → Records.
  3. Click Add record, pick the Type, and paste the Name and Content from your records table in Nexmail.
  4. For CNAME records, set Proxy status to DNS only (grey cloud). Mail records must never be proxied.
  5. Save, and repeat for each record. Or use Import and Export → Import with the zone file Nexmail offers.

Mail (MX) records: MX records take a Priority; enter the number shown in the table.

Proxy status must be the grey cloud, DNS only, for every mail record.

B. Move your DNS to Cloudflare

Cloudflare DNS is free. Nexmail copies your current records to Cloudflare, adds its own, and then you change two nameservers where you bought the domain. Nothing changes until you do that last step, and going back is putting the old nameservers back.

1. Make a custom token

  1. Open Cloudflare → My Profile → API Tokens (opens in a new tab) and click Create Token.
  2. At the bottom, next to Create Custom Token, click Get started. Name the token "Nexmail".
  3. Under Permissions, the first row has three dropdowns. Set the first dropdown to Zone, the second to Zone, the third to Edit.
  4. Click + Add more. In the new row, set the first dropdown to Zone, the second to DNS, the third to Edit.
  5. Click + Add more again. In the third row, set the first dropdown to Account (not Zone), the second to Account Settings, the third to Read.
  6. Under Account Resources, choose Include, then your account.
  7. Under Zone Resources, choose Include, then All zones from an account, then your account.
  8. Click Continue to summary, then Create Token, and copy the token. Cloudflare shows it only once.
The three permission rows, three dropdowns each. Set the first dropdown of each row, highlighted, before the other two.

2. Paste it into Nexmail

On the records step, open Move to Cloudflare, paste the token and click Copy my DNS to Cloudflare. Nexmail lists what it copied and anything it could not, and shows your two Cloudflare nameservers.

3. Switch the nameservers

This is the one step no registrar lets an outside app do. Sign in where you bought the domain and replace its nameservers with the two Cloudflare gave you:

At Namecheap

  1. Open Domain List and click Manage next to your domain.
  2. In the Nameservers row (Domain tab), change Namecheap BasicDNS to Custom DNS.
  3. Paste the two nameservers Cloudflare gave you, one per line, and click the green tick.

At GoDaddy

  1. Open My Products → Domains and pick your domain.
  2. Choose DNS → Nameservers → Change Nameservers → I'll use my own nameservers.
  3. Enter the two nameservers Cloudflare gave you and save.

At Squarespace (formerly Google Domains)

  1. Open your domain → DNS → Domain Nameservers → Use custom nameservers.
  2. Enter the two nameservers Cloudflare gave you and save.

At Porkbun

  1. Open Domain Management, click Details under your domain, then Authoritative Nameservers → edit.
  2. Replace them with the two nameservers Cloudflare gave you and submit.

At Hostinger

  1. Open hPanel → Domains → your domain → DNS / Nameservers → Change nameservers.
  2. Choose custom nameservers, enter the two nameservers Cloudflare gave you and save.

At IONOS

  1. Open Domains & SSL, click the gear next to your domain → Nameservers.
  2. Choose custom nameservers, enter the two nameservers Cloudflare gave you and save.

Anywhere else

  1. Sign in where you bought the domain (the registrar) and find its nameserver settings.
  2. Replace the current nameservers with the two nameservers Cloudflare gave you and save.

4. Wait for the switch

Nexmail checks every minute and tells you when the switch is seen. It usually takes minutes, occasionally a few hours. From then on, any DNS change Nexmail needs is one click.

If something goes wrong

  • “The token is missing a permission.” Open the token in Cloudflare and check every row’s first dropdown. It must be Zone (Account for the Account Settings row).
  • Nexmail cannot see your domain. Check Zone Resources includes your account (path B) or your domain (path A).
  • Lost the token. Cloudflare shows it once. Make a new one; Nexmail never kept the old one.
  • A record shows an orange cloud. Click it to turn it grey (DNS only) and save.

Put your domain on Nexmail this afternoon.

Free while in early access. Bring your own providers and pay them directly.

Create your workspaceSee pricing