HARi Email — send from your own domain
An admin turns HARi Email on from Settings → Email Sending when the workspace is not already sending another way. A verified domain lets you send from any address @yourdomain; a connected mailbox only from itself. On the Free plan that is 10 emails a day. A paid plan has no daily cap.
That is the whole setup. The rest of this page is the button, the DNS name to type, and what to do when a record does not pass.
Who turns HARi Email on?
Section titled “Who turns HARi Email on?”An administrator turns HARi Email on. Open Settings → Email Sending and, under Sent by HARi, click Turn on HARi Email. A workspace that already sends through its own email account keeps that setup. The card then tells you to write to support@haricrm.com if you want to move it. If you are not an admin, ask one.
The button is only shown to an administrator, and only when this workspace is not already sending. The card above it says HARi sends your emails, that you add three DNS records so mail lands in inboxes instead of spam, and that sending counts toward your daily allowance.
A workspace that already sends another way does not get the button. The card reads: “This workspace sends through its own email account. To move it to HARi Email, write to support@haricrm.com.” That existing setup stays until you ask.
If the button is not offered and the workspace is not already sending, an administrator’s card reads: “HARi Email can’t be switched on from here yet. Write to support@haricrm.com and we’ll turn it on.”
Someone who is not an administrator does not see these cards. The page says: “Only a workspace admin can see or change the account-wide sending settings. You can still connect your own mailbox above.”
Once HARi Email is on, adding and verifying a domain is also an administrator’s job. A person who is not an admin does not open that card.
You can send today without this, from Outlook or your own SMTP server. Those run on an account you already have. See Which method should send your mail?.
Why does my domain need to be verified?
Section titled “Why does my domain need to be verified?”Your domain has to be verified because an email address does not prove itself. Anyone can put your address on the From line, so mailbox providers check DNS for a published statement that the sending server is allowed to use the domain. Without that statement the message looks like a forgery and is treated as one.
Since 1 February 2024, Google has required it of every bulk sender: “email senders who send more than 5,000 messages per day to Gmail accounts must meet the requirements in this section” — including SPF and DKIM for the sending domain, and a DMARC record (Google, Email sender guidelines). The same guidelines tell senders to “Keep spam rates reported in Postmaster Tools below 0.30%”. A spam rate is only measurable against an authenticated domain. Verify once, and the reputation of your mail stays with your domain.
Microsoft has required the same authentication of high-volume senders to Outlook.com since 5 May 2025, first routing that mail to Junk and then refusing it (Microsoft, Outlook’s new requirements for high-volume senders).
Which name do I type for a subdomain?
Section titled “Which name do I type for a subdomain?”For a subdomain such as mail.acme.com, the name you type in the parent zone includes the subdomain label. The screen calls that field Name (what to type). In the acme.com zone, a DKIM full name of s1._domainkey.mail.acme.com is typed as s1._domainkey.mail, not s1._domainkey. Dropping mail creates the record on the wrong name, and verify never passes.
The full name is shown underneath, labelled Full name:. Copy Name (what to type) into the name field at your DNS host. The selector in front of ._domainkey is the one the screen generated for your domain. s1 is only the shape of the example. Do not invent a selector, and do not strip the name back to the part before .mail.
The same rule applies to the other two records. In the acme.com zone the return-path name ends in .mail, and the link-tracking name is link.mail. Each one is the full name with .acme.com taken off, which leaves the subdomain label in place.
If you are sending from the zone itself, for example acme.com edited at acme.com, Name (what to type) does not gain an extra label. A DKIM name there stays s1._domainkey. Copy the field either way. Guessing which form the host “usually” wants is how a record lands on the wrong name.
HARi prints both forms so you can check. Name (what to type) is what you enter. Full name: is the finished name, such as s1._domainkey.mail.acme.com, which you use only if your host refuses anything shorter.
Which DNS hosts does HARi link?
Section titled “Which DNS hosts does HARi link?”When HARi recognizes the company that hosts your DNS, the screen links that company’s guide to adding a CNAME. The hosts it links are Cloudflare, GoDaddy, Gandi, Google Cloud DNS, WordPress.com, Amazon Route 53, OVH, IONOS, Squarespace and Microsoft Azure. If your host is not one of those, there is no link. You still copy the records the screen lists.
The line on the screen is “Your domain’s DNS is managed at {label}. Open {label}‘s guide to adding a CNAME record”, with the company’s name filled in. It is a link to that company’s own instructions, opened in a new tab. HARi does not embed the guide.
Copy all instructions copies the domain, the DNS zone, every record’s type, Name (what to type), full name and value, and that guide link when there is one. Email these records to someone opens a dialog of the same name. It says the records will be emailed from hello@haricrm.com, and that you can send this 5 times a day. The address box suggests it@yourcompany.com. Nothing is sent until you click Send records.
How many emails a day are included?
Section titled “How many emails a day are included?”On the Free plan, HARi Email includes 10 emails a day. That is the daily number the product enforces for this method. A paid plan has no daily cap. Mail you send through Outlook or your own server does not count against it. The number on Email Sending is the one your workspace uses.
Before you turn HARi Email on, a plan that has a daily number shows “Your plan includes {n} emails a day with HARi Email.” A paid plan has nothing to show there, so that line is absent. After HARi Email is on, a card titled Your daily email limit appears only when your workspace has a daily number, with the unit / day.
The same page shows Your hourly email limit. The default is 100 emails an hour on the Free plan and 500 an hour on a paid plan, unless your workspace has its own number. That card is read-only. It is not how you turn sending on, and it is not a number you type.
Nothing is billed per email. See Email sending allowance for how the daily number sits with your plan.
How do I add the three records?
Section titled “How do I add the three records?”You add three CNAME records at your DNS host, then click Verify. Two are required. DKIM lets the recipient check that the mail was signed for your domain. The return-path receives bounces and covers SPF. Link tracking is optional. Copy the name and the value from the screen. Do not retype them, and do not drop the subdomain label.
| Record | Name (what to type), for mail.acme.com in the acme.com zone | What it does | Required |
|---|---|---|---|
| CNAME | <selector>._domainkey.mail | DKIM. The recipient checks this signature against your domain. | Yes |
| CNAME | <selector>.mail | Return-path. Bounces come back here, and this record covers SPF. | Yes |
| CNAME | link.mail | Link tracking. Clicks are counted on your own domain. Skip it if you do not want that. | No |
The selector is whatever the screen shows for your domain. The .mail ending is the part people drop. All three records are CNAMEs, so HARi can change the target later without asking you to edit DNS again.
- Open Settings → Email Sending and turn on HARi Email if the button is there. If the card says this workspace already sends through its own account, stop here and use that account, or write to support@haricrm.com.
- In Add a sending domain, type the domain only.
mail.acme.comis the right shape. Nohttps://and no trailing slash. The box itself suggestsmail.yourdomain.com. Click Add domain. - Leave HARi open. Each record shows Name (what to type), the value, and Full name:, with a copy button on each.
- Open your DNS host. If the guide link is on the screen, follow it. The page is usually under DNS, DNS records, Zone editor, or Advanced DNS.
- Add each record as a CNAME. Paste Name (what to type) into the name field and the value into the target. Leave TTL at its default.
- Back in HARi, click Verify. Each record is marked Verified, Pending, or Failed, with a line that says where it stands.
- When the two required records pass, HARi asks “mail.acme.com is verified. Use it as your default sender address?” Click Use this domain or Keep current.
Above the records, the screen states the difference in one line: a verified domain lets the team send from any address at that domain, such as news@ or julie@, and a connected mailbox only sends from its own address.
What if verification does not pass?
Section titled “What if verification does not pass?”Start with the line under the record that failed. For mail.acme.com, a record saved without the mail label is the usual miss. If the line says the record was found and is still being confirmed, wait and verify again. Verified means that line is done. Most hosts publish in minutes, and it can take up to 24 hours.
| What you see | What it usually means | What to do |
|---|---|---|
| ”We couldn’t find this record in your DNS yet” | The record has not been published, or it was saved on the wrong name | For mail.acme.com, check Name (what to type) still ends in .mail. A record created as s1._domainkey in the acme.com zone will never verify mail.acme.com |
| One record fails and the others pass | A bad paste: a missing character, a space, or a trailing dot | Delete that record at your DNS host and add it again with the copy buttons |
| ”Found in your DNS — waiting for the provider to confirm it” | The record is in DNS and the check is still settling | Wait a few hours, then verify again. Nothing else is wrong |
| Your host rejects the name | The name you pasted is not the form that host’s zone expects | Paste Name (what to type) first. Use Full name: only if the host asks for the complete name |
| The host says the name is already taken | An older email tool left a record on that exact name | Remove the old record, then add the one from HARi |
| Only link tracking fails | That record is marked Optional | Leave it. The domain still verifies, and mail still sends. You just do not get click counts |
| The records on screen are an SPF text record and a DMARC record, not three CNAMEs | Your own SMTP server is open, not HARi Email | Close that card and open HARi Email. To stay on your own server, follow SMTP |
| ”This workspace sends through its own email account” | The workspace already sends another way, so HARi Email is not offered here | Keep that setup, or write to support@haricrm.com to move it |
| ”HARi Email can’t be switched on from here yet” | This workspace cannot be switched on from the page | Write to support@haricrm.com. An admin is who sees Turn on HARi Email when it is available |
| ”Only a workspace admin can see or change the account-wide sending settings” | You are not an administrator | Ask an admin. You can still connect your own mailbox on the same page |
If the screen has been waiting, it says it is still waiting for your DNS host, that it checks again every hour, and that admins are told when it passes. If it is still failing after 24 hours, write to HARi support with the domain name. The line under each record says which check is unhappy.
Would you rather send from your own account?
Section titled “Would you rather send from your own account?”Use Outlook or your own SMTP server to send from an account you already have. Those send only from that mailbox’s own address, and they are not limited to 10 emails a day. Once a HARi domain is verified, the team can send from any address at that domain.
Gmail can be connected so you can read and reply to conversations. Gmail cannot send campaigns. For outgoing email, pick HARi Email, Outlook, or your own SMTP server. See Unified inbox and connected channels.
- Outlook / Microsoft 365 — sign in once. No DNS. The mail leaves as your Outlook address.
- Your own SMTP server — any host that gives you a server name, a port, a username and a password.
Both send on your own account and do not draw on the HARi Email daily allowance. HARi Email remains the method to pick when you want any address at your own domain, without running a mail server.
Where do I go next?
Section titled “Where do I go next?”Choose the method on Email Sending. The sending allowance page says how the daily number sits with your plan. Outlook and your own SMTP server send from an account you already have. Email setup covers templates and sending from a record.
If a message does not leave, Why are my emails not sending? is where you start.