How to Authenticate Your Domain Name on IONOS
Introduction
If your domain’s DNS is managed at IONOS (1&1 IONOS), you authenticate it for systeme.io email by adding three CNAME records and one TXT (DMARC) record under DNS → Add a record. Official help article 3965 walks through copying values from your systeme.io account into IONOS.
This guide covers email sending authentication, not connecting a sales funnel (see article 3962 under Custom Domain).
Prerequisites
- Active systeme.io account.
- Domain hosted or registered at IONOS.
- IONOS account login.
- Domain entered in systeme.io without www.
- An active site on the domain when required—see general domain authentication.
Step 1 — Generate Records in systeme.io
- Log in to systeme.io.
- Settings → Emails.
- Start domain authentication.
- Enter your domain without www → Save.
- Status shows Pending until DNS propagates.
- Refresh → click the eye icon to view 3 CNAME + 1 TXT.
Example pattern (your values are unique):
si942517→inbound.systeme.iosystemeio1._domainkey→key1.systeme.iosystemeio2._domainkey→key2.systeme.io
Step 2 — Open IONOS DNS
- Log in to IONOS.
- Select the domain to authenticate.
- Open DNS (DNS settings / DNS zone).
- Click Add a record for each entry from systeme.io.
Step 3 — Add the Three CNAME Records
Repeat for each CNAME (article 3965):
- Type: CNAME.
- Hostname: copy from systeme.io—prefix only (e.g.
si942517; if systeme.io showssi942517.yourdomain.com, enter onlysi942517when IONOS appends the domain). - Points to (Value / Target): paste the target from systeme.io and, per IONOS practice in systeme.io guides, append a period (.) at the end (e.g.
inbound.systeme.io.,key1.systeme.io.,key2.systeme.io.). - Click Save.
Expected examples:
- Hostname:
si942517— Points to:inbound.systeme.io. - Hostname:
systemeio1._domainkey— Points to:key1.systeme.io. - Hostname:
systemeio2._domainkey— Points to:key2.systeme.io.
Step 4 — Add the TXT (DMARC) Record
- Add a record → Type: TXT.
- Hostname:
_dmarc. - Value (Points to): e.g.
v=DMARC1; p=none; rua=mailto:you@yourdomain.com—replace the placeholder with your real email. - Save.
- Optional: verify with a DMARC checker (e.g. MXToolbox) after propagation.
Keep one _dmarc TXT only.
How to Add a DMARC Record on IONOS (article 3964)
Step 5 — Verify in systeme.io
- Wait for DNS propagation (minutes to 48 hours).
- Settings → Emails on systeme.io.
- Confirm Pending → Verified.
- Verify your sender email address on the same domain.
IONOS-Specific Notes
- Website elsewhere: If IONOS warns that new CNAMEs may conflict with Squarespace or another site, use a subdomain for funnels or consult IONOS before changing root records—email auth records are usually additive but plan carefully.
- IONOS Mail: Keep existing MX records; email-auth CNAMEs work alongside IONOS email when configured correctly.
- Separate record sets: Funnel CloudFront CNAMEs (3962) ≠ email inbound/DKIM CNAMEs (3965)—add both without deleting the wrong set.
- Hostname vs full name: IONOS funnel docs use “part before your domain” for the second CNAME—the same rule applies to DKIM hosts.
Troubleshooting
| Issue | Likely cause | Fix |
|---|---|---|
| Pending forever | Wrong Hostname or target typo | Re-copy from eye icon; check trailing dot. |
| Duplicate record error | Old conflicting CNAME | Remove obsolete row; re-add correct target. |
| DMARC invalid | Two _dmarc TXT rows | Delete duplicate; one policy only. |
| Site offline fear | Edited www funnel CNAME | Email auth uses different hosts—don’t replace www funnel record. |
| Verified sender fails | Sender not on same domain | Use e.g. hello@yourdomain.com after domain verifies. |
Frequently Asked Questions
Trailing dot on IONOS?
Yes for CNAME Points to values in systeme.io + IONOS guides.
Hostname field?
Prefix only (si942517, systemeio1._domainkey).
Where in IONOS?
Domain → DNS → Add a record.
Funnel vs email?
Different settings and CNAME targets in systeme.io.
DMARC?
TXT, Hostname _dmarc, customized rua email.
Last updated: July 3, 2026