Getting started with SealedMail

There's one task: updating two DNS records. This guide assumes you've never touched DNS before. If you have an IT provider, you can skip the whole page - just forward them your welcome email.

☐

Step 1 - Find your two SealedMail addresses

Your welcome email (sent within service hours after you subscribed) contains two addresses unique to your domain: one for DMARC reports (the RUA address) and one for TLS reports (the TLS-RPT address). Keep that email open.

☐

Step 2 - Log in to wherever your domain is managed

This is usually the company you bought your domain from (your registrar), or your website host. You're looking for a section called DNS settings, DNS management, or DNS records.

Not sure who manages your domain? Whoever sends you the renewal invoice is the place to start - their support team can point you to the DNS settings, and most will make the changes for you if you send them the details from your welcome email.

☐

Step 3 - Update your DMARC record

In your DNS settings, find the record whose name starts with _dmarc. Your welcome email shows exactly what it should contain - typically this means adding the SealedMail RUA address to the record (or creating the record, if you don't have one yet; your welcome email covers both cases with copy-and-paste text).

☐

Step 4 - Add your TLS-RPT record

Same place, same approach: a record named _smtp._tls, with copy-and-paste contents from your welcome email. If it doesn't exist yet, create it; if it does, add the SealedMail address.

☐

Step 5 - Tell SealedMail you're done (optional but helpful)

Reply to your welcome email once you've saved the changes. SealedMail verifies both records have propagated - DNS changes can take a few hours to spread across the internet - and confirms when everything is flowing.

If something goes wrong

Email [email protected] - ideally with a screenshot of your DNS settings page - and you'll get plain-English help the same working day (Monday - Friday, 09:00 - 17:00). DNS interfaces vary by provider, and no question is too basic.

What happens next

Once your records are live, email receivers begin sending reports to SealedMail - usually within 24-48 hours. Your first weekly report arrives the following Monday, and every Monday after that. It will include your refreshed health check, so you'll see your improved configuration reflected straight away.

That's it. From here, your only job is reading one short email a week.