Move Your DNS to Cloudflare (Free) to Unlock One-Click Email Fixes
Move your domain's DNS to Cloudflare's free plan without breaking email or your website, so a scanner with your scoped token can add the exact MX, SPF, and DMARC records in one click.
Some DNS hosts - including several popular registrars - do not give normal accounts an API to edit DNS records. That is why a tool can read your public DNS and tell you exactly what is wrong, but cannot offer to apply the change for you: it has no safe, authorized way to write to your zone at that host.
Cloudflare is different. Its free plan includes full DNS hosting and a scoped API token you create yourself, so a tool you authorize can add a specific record for you and you approve each change. Moving your DNS to Cloudflare is the most reliable way to turn "here is what to paste" into "apply this for me" - and it costs nothing.
This guide explains what moving DNS to Cloudflare does (and does not) change, how to do it without breaking your website or email, and how to confirm everything still works before and after the switch.
On this page
Why moving DNS to Cloudflare unlocks one-click changes
Applying a DNS change for you requires writing to the zone where your records actually live. That is only possible when your DNS host exposes an API your account can use. Cloudflare's free plan does exactly that, through a token you create and scope to a single domain.
- Cloudflare DNS hosting is free, with no record limit for normal use.
- You create a scoped "Edit zone DNS" token yourself and can delete it anytime.
- A tool you authorize can add an exact record after you approve it - no password, no account access.
- You keep your domain registration wherever it is now; only the DNS nameservers change.
In short: you are not switching companies or paying anything. You are moving where your DNS records are managed to a host that lets you authorize precise, reversible changes.
What changing nameservers does and does not change
Your nameservers decide which DNS host answers for your domain. When you point them at Cloudflare, every record - email and website - is served from Cloudflare from then on.
| What changes | What stays the same |
|---|---|
| Where your DNS records are managed (now Cloudflare) | Who you bought the domain from (your registrar is unchanged) |
| The dashboard you edit MX, SPF, DKIM, and DMARC in | Your email provider and mailboxes (Google, Microsoft, etc.) |
| The nameservers listed at your registrar | Your website host, as long as its A or CNAME records move too |
The one real risk is an incomplete move: if a record does not come across, the service it controls can break until you add it. That is why copying your current records first - the next step - matters.
Before you start: copy your current records
Cloudflare imports most existing records automatically when you add a domain, but it can miss some. Make your own list first so you can confirm nothing is lost.
- Run an email DNS check on your domain and note the MX, SPF (TXT), DKIM, and DMARC records it reports.
- Open your current DNS host and copy any website records too - usually an A record on the root and a CNAME on www.
- Note any other records you rely on, such as verification TXT records for Google or Microsoft.
- Keep this list open while you set up Cloudflare so you can check each record against it.
If your domain receives email, the MX records and the SPF, DKIM, and DMARC TXT records are the ones that must survive the move intact.
Step by step: add your domain to Cloudflare
| Step | What to do |
|---|---|
| 1 | Create a free account at dash.cloudflare.com. |
| 2 | Choose Add a site, enter your domain, and select the Free plan. |
| 3 | Let Cloudflare scan and import your existing DNS records, then review them against the list you made. |
| 4 | Add any record that did not import - especially MX records and the SPF, DKIM, DMARC, and website A or CNAME records. |
| 5 | Cloudflare shows you two nameservers (for example, two names ending in ns.cloudflare.com). Copy both. |
| 6 | At your domain registrar, replace the current nameservers with Cloudflare's two, and save. |
| 7 | Wait for activation. It is usually quick but can take up to 24 hours to fully propagate. |
Until activation finishes, the internet may use either your old or new host, so keep both sets of records matching during the switch.
After the move: re-check, then apply changes
Once Cloudflare shows your domain as Active, confirm everything resolves before relying on it.
- Re-run an email DNS check and confirm MX, SPF, DKIM, and DMARC look the way they did before - or better.
- Open your website to confirm the A or CNAME records moved correctly.
- Send and receive a test email to confirm mail flow is intact.
With DNS on Cloudflare, you can now authorize a scoped token and apply any remaining email DNS changes in one approved click, instead of pasting each record by hand. If you would rather not move at all, you can always add the exact records manually at your current host - moving to Cloudflare is optional and only needed if you want one-click changes.
Quick checklist
- Copy your current MX, SPF, DKIM, and DMARC records before changing anything.
- Add your domain to Cloudflare's free plan and review every imported record.
- Add any record that did not import, especially MX and the email TXT records.
- Replace your nameservers at your registrar with Cloudflare's two nameservers.
- Wait for Cloudflare to show the domain as Active, then re-check your email DNS.
- Confirm your website and a test email both still work after the switch.