How do you add email DNS records in Hover?

Hover keeps DNS simple: one DNS page per domain, an Add a record button and short forms. Two details matter for email. The root domain is @, and Hover warns that long 2048-bit DKIM keys in TXT records may not save, which affects Google Workspace and other providers that publish DKIM as TXT.

This guide covers MX, SPF, DKIM and DMARC records at Hover, using Hover's help center for every screen name. If the records are new to you, read SPF vs DKIM vs DMARC first.

Is your DNS actually hosted at Hover?

Hover's DNS help says: "You can only manage a domain's DNS records through Hover if the domain is using Hover's nameservers." Those are ns1.hover.com and ns2.hover.com.

1. Sign in and open the domain's Overview page.
2. Find Nameservers on the left-hand side.
3. If they are Hover's, continue here. If they belong to a web host, a website builder or Cloudflare, add your records there instead; our Cloudflare guide covers that case.

Think before moving nameservers to or from Hover. Hover's nameserver article says "Once you save a nameserver change, Hover cannot stop it from taking effect," and that changes can take 24 to 48 hours. Copy every email record to the new DNS host first.

Where do you add DNS records in Hover?

At the time of writing (October 2026), Hover's steps are (Hover Help):

1. Sign in to your Hover control panel with two-factor authentication.
2. From the domain's Overview page, click the DNS section.
3. Click Add a record.
4. Select the record type and enter the values from your provider.
5. Save the record.

The fields Hover documents for email record types:

Hover's tip on Hostname: "If you're prompted to enter your full domain as the hostname, use the @ symbol instead." For anything other than the root, enter just the prefix.

To delete records, select the checkbox next to each one, open the Bulk edit drop-down, choose Delete and confirm. Hover's SPF guide also shows a green X at the far right of a record for removing it. Hover's articles describe adding and deleting records; to change a value, the documented route is to delete the old record and add the new one. Hover warns that "Deleting a DNS record can immediately disconnect the service tied to it, such as email delivery or a website," so add the replacement promptly.

How do you add or edit an SPF record in Hover?

SPF is a TXT record with Hostname @. Hover's SPF guide warns: "A domain can only have one SPF record." RFC 7208, section 3.2 says the same, so check for an existing one first.

Hover gives its "most widely used SPF record" for Hover email as:

v=spf1 include:_spf.hostedemail.com ~all

1. On the DNS page, look for a TXT record with Hostname @ whose content starts v=spf1.
2. If one exists, write down its value, then build a merged record that keeps the includes you still use and adds your new provider's include before ~all or -all.
3. Click Add a record, select TXT, enter @ as the Hostname and the merged record as the Content, and click Add record.
4. Delete the old SPF record straight away, so only one remains.

For example, a domain using Hover email plus Zendesk for support would publish v=spf1 include:_spf.hostedemail.com include:mail.zendesk.com ~all. A domain that moved entirely to Google Workspace would replace the Hover include with include:_spf.google.com. Our SPF provider pages list each include, and the SPF Record Generator builds the merged record.

How do you add a DKIM record in Hover?

That depends on who sends your mail.

If you use Hover email

Hover's DKIM guide says "DKIM on Hover is enabled by a Hover support advisor on the backend — there's no self-serve DNS record to add or control panel toggle to switch on." You need an active Hover mailbox on the domain. Contact Hover Support, confirm the domain, and allow 24 to 48 hours.

If your provider gives CNAME records

Microsoft 365 and many sending platforms host the key and give you CNAMEs, which avoids Hover's TXT length issue.

1. Click Add a record and select CNAME.
2. Enter the selector host as Hostname, for example selector1._domainkey.
3. Paste the provider's target into Target Name.
4. Save, then repeat for selector2._domainkey.

If your provider gives a TXT record

1. Click Add a record and select TXT.
2. Enter the selector host as Hostname, for example google._domainkey.
3. Paste the key, which starts v=DKIM1;, into Content.
4. Save, then check it with the DKIM Checker.

What if Hover rejects a 2048-bit key?

Hover's DNS help says it "supports TXT record keys up to 1048 bits by default; longer keys (2048-bit or higher) may cause an error when saving the record." If you hit that error, you have three options:

1. Use CNAME-based DKIM if your sending service offers it. The key then lives with the provider.
2. Choose a 1024-bit key where the provider allows it. Google's Set up DKIM page says to select 1024 "If your domain host doesn't support 2048-bit keys."
3. Ask Hover Support whether the longer record can be added for your domain.

A 1024-bit key is a stopgap, not the goal. RFC 8301 says signers "SHOULD use RSA keys of at least 2048 bits." If you need 2048-bit TXT keys and Hover can't publish them, moving DNS hosting to a provider that can is a reasonable fix. Our guide to DKIM keys too long for a TXT record explains the background, and DKIM key rotation covers moving up later.

Once the record is published, turn on signing in your provider's console. DKIM setup for Microsoft 365 and Google Workspace shows where, and DKIM records by provider lists each service's selectors.

How do you add a DMARC record in Hover?

Hover's DMARC article puts the record at the _dmarc subdomain.

1. Click Add a record and select TXT.
2. Enter _dmarc as the Hostname.
3. Enter your policy as the Content, for example v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com.
4. Click Save.

Hover's minimum example is v=DMARC1; p=none;, and it suggests adding report addresses so you receive data. Start at p=none with an rua address you actually read, then tighten. The DMARC Record Generator builds the record and DMARC quarantine vs reject helps you choose the end state.

How do you change MX records in Hover?

1. On the DNS page, note your current MX records so you can roll back.
2. Click Add a record and select MX.
3. Enter @ as the Hostname, the Priority your provider gives, and the Mail Server hostname. Leave TTL at the 15-minute default unless told otherwise.
4. Save, and repeat for each further mail server.
5. Delete the old MX records with Bulk edit > Delete once your new provider says to.

Plan the switch with our guide to changing MX records without losing email. Hover's short default TTL helps a cutover, but cached answers for the old records can last as long as their own TTL.

What does a complete Hover email setup look like?

An example for a domain on Google Workspace. Your values will differ.

How do you check the records after saving?

Hover says changes "can take up to 24–48 hours to fully propagate," though records with its short default TTL usually show sooner. Then:

1. MX: MX Lookup shows only your intended mail servers.
2. SPF: SPF Checker finds one record with 10 lookups or fewer.
3. DKIM: DKIM Checker shows the full key and its length.
4. DMARC: DMARC Checker parses the policy.
5. Headers: a test message to an outside mailbox shows spf=pass, dkim=pass and dmarc=pass; see how to read email headers.

What are the common Hover email DNS mistakes?

• Typing the full domain into Hostname. Use @ or the prefix.
• Leaving two SPF records after adding a merged one. Delete the old record.
• Assuming a 2048-bit TXT key saved correctly. Check it with the DKIM Checker.
• Trying to add a CNAME on @. Hover doesn't support it, and email doesn't need it.
• Editing Hover DNS while nameservers point elsewhere.

Next steps

1. Run the Email Health Check to see MX, SPF, DKIM and DMARC in one scan.
2. If your DKIM key won't fit, decide between a CNAME-based key, a 1024-bit stopgap or moving DNS hosting.
3. New domain? Use the new domain email setup checklist.
4. The free Domain Watch checks your public MX, SPF and DMARC weekly and emails you when they change.

If you route mail through a filtering service such as iBlockSpam, its servers go in the MX records the same way. More walk-throughs are in setup guides.