Skip to content
Cloudflare Docs

Manually add domains

This page will teach you how to manually add domains via BCC/Journaling on the Cloudflare dashboard.

This setup is ideal if your email provider is not Microsoft 365 or Google Workspace, or you do not want to directly integrate your account. Beware that manually add does not support auto-move or directory synchronization.

Prerequisites

To use Email security, you will need to have:

Manually add domains

  1. Log in to Cloudflare One ↗ > Email security.
  2. Select Overview. If you have not purchased Email security, select Contact Sales. Otherwise, select Set up > BCC/Journaling.
  3. Select Manual add.

Users with domains on Cloudflare

On the Set up Email security page:

  1. Connect domains: Select at least one domain. Then, select Continue.
  2. (Optional) Add manual domains: Manually enter additional domains. Then, select Continue.
  3. (Optional) Adjust hop count: Enter the number of hops, and then select Continue.
  4. Select your processing location: Configure where you want Cloudflare to process your email. Global will be the default option. If you choose Global, <account tag>@CF-emailsecurity.com will be your regional service address. Once you have chosen your processing location, select Continue.
  5. Review details: Review your connected domains and regional service address. Then, select Go to domains.

Users who do not have domains with Cloudflare

If you do not have domains with Cloudflare, the Cloudflare dashboard will display two options:

  • Add a domain to Cloudflare.
  • Enter domain manually.

Add a domain to Cloudflare

Selecting Add a domain to Cloudflare will redirect you to a new page where you will connect your domain to Cloudflare. Once you have entered an existing domain, select Continue.

Enter domain manually

On the Set up Email security page:

  1. Connect domains: Select at least one domain. Then, select Continue.
  2. (Optional) Add manual domains: Manually enter additional domains. Then, select Continue.
  3. (Optional) Adjust hop count: Enter the number of hops, and then select Continue.
  4. Configure service address with your third party email provider: Copy and paste the service address into your third-party email provider to allow BCC/Journaling: <account tag>@CF-emailsecurity.com.
  5. Review details: Review your connected domains. Then, select Go to domains.

Enable auto-moves

To enable auto-move events, you will have to associate an integration.

To associate an integration:

  1. Log in to Cloudflare One ↗ > Email security.
  2. Go to Settings > Domain management > Domains > Select View.
  3. On the Domain management page, locate your domain, select the three dots, then select Associate an integration.
  4. Select Connect an integration. Follow the steps to enable the Microsoft 365 integration.
  5. Select the three dots, then select Associate an integration. Select the integration, then select Associate.

Now that your domain has an associated integration, enable auto-move events on your domain.