--- title: "How do we fix the custom domain configuration problems for Azure Email Communication? | DuoCircle" description: "How do we fix the custom domain configuration problems for Azure Email Communication?" image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/" --- Quick Answer Three common Azure Email Communication Service custom domain failures and their fixes. Domain verification fails when Azure cannot read the ms-domain-verification TXT record: copy the value from the Azure portal, add it at your DNS provider, then verify with \`nslookup -q=TXT yourdomain.com\` or MxToolBox. SPF verification fails when the SPF TXT record is missing or uses \~all instead of -all: publish \`v=spf1 include:spf.protection.outlook.com -all\` and consolidate any duplicate SPF records into one. DKIM verification fails when the CNAME records for \`selector1-azurecomm-prod-net.\_domainkey.yourdomain.com\` (and selector2) are not present: confirm them with \`nslookup\` set q=TXT. Allow time for DNS propagation before retrying. How do we fix the custom domain configuration problems for Azure Email Communication? Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2024/11/How-do-we-fix-the-custom-domain-configuration-problems-for-Azure-Email-Communication.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Femail-hosting%2Ffix-custom-domain-configuration-issues-azure-email-communication%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20do%20we%20fix%20the%20custom%20domain%20configuration%20problems%20for%20Azure%20Email%20Communication%3F&url=undefined%2Fblog%2Femail-hosting%2Ffix-custom-domain-configuration-issues-azure-email-communication%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Femail-hosting%2Ffix-custom-domain-configuration-issues-azure-email-communication%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Femail-hosting%2Ffix-custom-domain-configuration-issues-azure-email-communication%2F&title=How%20do%20we%20fix%20the%20custom%20domain%20configuration%20problems%20for%20Azure%20Email%20Communication%3F "Share on Reddit") [ ](mailto:?subject=How%20do%20we%20fix%20the%20custom%20domain%20configuration%20problems%20for%20Azure%20Email%20Communication%3F&body=Check out this article: undefined%2Fblog%2Femail-hosting%2Ffix-custom-domain-configuration-issues-azure-email-communication%2F "Share via Email") ![Email Communication](https://media.mailhop.org/duocircle/images/2024/11/What-is-a-DMARC_-7532.jpg) [Email deliverability](/a-guide-on-email-deliverability) is the backbone of [email marketing campaigns](https://www.campaignmonitor.com/resources/glossary/email-campaign/); your effort in strategizing and executing the campaign will go to complete waste if half of your emails don’t reach the inboxes of the intended recipients. If you have deployed [email authentication](/resources/email-authentication) protocols like SPF and DKIM and ensured their TXT records aren’t amiss, receiving [mail servers](https://www.cloudflare.com/learning/email-security/what-is-a-mail-server/) will consider emails sent from your **domain by authorized senders** as genuine and, hence, will not hesitate to place them in the inboxes. [![email security](https://media.mailhop.org/duocircle/images/2024/11/DMARC-generator-4765.jpg)](https://media.mailhop.org/duocircle/images/2024/11/DMARC-generator-4765.jpg) It’s your part of the job to ensure consistency in your [email communication](https://www.tidio.com/blog/email-communication/); this is an element of good customer service. You are encouraged to customize your domain configuration as per your **business tolerance and expectations** from [email security](/). _This practice helps you better track and analyze how your email campaigns are performing and whether or not they require any adjustments_. But if you are facing any issues **customizing domain configurations in Azure**, then consider this as your guide. ## Problem- Can’t verify custom domain status To verify the ownership of your custom domain, add a [TXT record](https://en.wikipedia.org/wiki/TXT%5Frecord) to your domain’s **DNS hosting provider**. During verification, Azure Email Communication Service attempts to read the TXT record from your domain. If it fails to find the record, the verification will not succeed. If verification fails, **follow these steps** to troubleshoot and resolve the issue: - _Copy the TXT record provided in the Azure portal, which will look similar to this_: ms-domain-verification=43d01b7e-996b-4e31-8159-f10119c2087a - If you haven’t already, add the TXT record to your domain registrar or DNS hosting provider. - Verify that the TXT record has been added by **checking your domain’s TXT records**. - Use the nslookup tool in Windows Command Prompt with this command: nslookup -q=TXT YourCustomDomain.com. - Alternatively, use a third-party [DNS lookup tool](https://www.digicert.com/faq/dns/how-does-dns-lookup-work) like MxToolBox. - Review the list of TXT records for your domain. If the record is missing, Azure Email Communication Service won’t be able to **verify your domain**. [![third-party DNS lookup tool ](https://media.mailhop.org/duocircle/images/2024/11/email-sending-services-1.jpg)](https://media.mailhop.org/duocircle/images/2024/11/email-sending-services-1.jpg) ## Problem- Can’t verify SPF status SPF status can show the ‘failed’ status for many reasons. Try fixing it. - Copy the [SPF record](/content/spf-records) provided in the Azure portal, which should resemble this: \`v=spf1 include:spf.protection.outlook.com -all\`. - Review your domain’s TXT records. If the SPF record is missing, Azure Email Communication Service will not be able to verify it. - Confirm that the SPF record uses \`-all\` instead of \`\~all\`, as \`\~all\` will cause SPF verification to fail. - Add the SPF record to your domain registrar or DNS hosting provider. - After adding the record, verify it using one of these methods: - Use the \`nslookup\` tool in **Windows Command Prompt** with the command: \`nslookup -q=TXT YourCustomDomain.com\`. - _Alternatively, check the SPF record using a third-party DNS lookup tool_. If propagation delay is suspected, wait a few hours and test again. Also, consider consolidating multiple SPF records into **one to avoid conflicts**. [![Hosted Email Servers](https://media.mailhop.org/duocircle/images/2024/11/Key-Statistics-On-Hosted-Email-Servers.jpg)](https://media.mailhop.org/duocircle/images/2024/11/Key-Statistics-On-Hosted-Email-Servers.jpg) ## Problem- Can’t verify DKIM status If DKIM verification fails in [Azure Email Communication Service](/email-hosting/fixing-custom-domain-configuration-problems-for-azure-email-communication-services/), follow these steps: - Open Command Prompt and run \`nslookup\`. - Type: \`set q=TXT\`. - Check for DKIM records using \`selector1\`: \`selector1-azurecomm-prod-net.\_domainkey.contoso.com\`. This command retrieves the **CNAME DKIM records** for your domain. If the records appear in the output, Azure should verify DKIM. If the records are missing, Azure cannot verify [DKIM](/resources/what-is-dkim), which could weaken email security and increase the [risk of spoofing](https://spacenews.com/america-risk-high-impact-gps-jamming-spoofing-from-space/) or delivery failures. ## Topics DKIMDMARCemail securitySecurityspfUpdates ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ News 5m Apple Pay Scam, Crypto Fraud Victims, Retirement Phishing Loss, Cybersecurity News \[April 06, 2026\] Apr 13, 2026 ](/blog/announcements/cyber-security-news-update-week-15-of-2026/)[ News 6m GitHub Backdoor Threat, Cartier Data Breach, Fake RubyGems Steal, Cybersecurity News \[June 02, 2025\] Jun 9, 2025 ](/blog/announcements/cyber-security-news-update-week-24-of-2025/)[ News 6m Malicious npm Packages, Salesloft GitHub Breach, Malvertising Commit Trick, Cybersecurity News \[September 08, 2025\] Sep 15, 2025 ](/blog/announcements/cyber-security-news-update-week-38-of-2025/)[ News 6m Ransomware Disrupts Airports, BRICKSTORM Backdoor Intrusions, Pandoc Flaw Exploited, Cybersecurity News \[September 22, 2025\] Sep 29, 2025 ](/blog/announcements/cyber-security-news-update-week-40-of-2025/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"How do we fix the custom domain configuration problems for Azure Email Communication?","description":"How do we fix the custom domain configuration problems for Azure Email Communication?","url":"https://www.duocircle.com/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/","datePublished":"2024-11-29T16:48:35.000Z","dateModified":"2025-06-16T18:04:17.000Z","dateCreated":"2024-11-29T16:48:35.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/"},"articleSection":"email-hosting","keywords":"DKIM, DMARC, email security, Security, spf, Updates","wordCount":553,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/11/What-is-a-DMARC_-7532.jpg","caption":"Email Communication","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Email Hosting"},{"@type":"ListItem","position":3,"name":"How do we fix the custom domain configuration problems for Azure Email Communication?","item":"https://www.duocircle.com/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Email Hosting","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"How do we fix the custom domain configuration problems for Azure Email Communication?","item":"https://www.duocircle.com/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"How do we fix the custom domain configuration problems for Azure Email Communication?","description":"How do we fix the custom domain configuration problems for Azure Email Communication?","url":"https://www.duocircle.com/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/","datePublished":"2024-11-29T16:48:35.000Z","dateModified":"2025-06-16T18:04:17.000Z","dateCreated":"2024-11-29T16:48:35.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-hosting/fix-custom-domain-configuration-issues-azure-email-communication/"},"articleSection":"email-hosting","keywords":"DKIM, DMARC, email security, Security, spf, Updates","wordCount":553,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/11/What-is-a-DMARC_-7532.jpg","caption":"Email Communication","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```