đź“« Setting Up My Own Custom Email Domain (Without Big Tech)

Why I Did This

I’ve always wanted more control over my digital identity—especially email. Owning a custom domain and being able to send mail from me@mydomain.com isn’t just about looking professional. For me, it’s also about privacy, independence, and moving away from the big email providers that monetize attention and data.

But it wasn’t clear how to do it without falling back on tools like G Suite or Microsoft 365. This guide shows how I set it up using two privacy-focused services: Proton Mail and deSEC.

🔍 Why Proton Mail + deSEC?

I’ve been a long-time Proton user. They’ve earned my trust. No ads, no trackers, just solid encryption and a strong ethical foundation. With their Mail Plus plan, I could connect my own domain and create a few personal email addresses without much friction.

As for deSEC, I discovered it while looking for a DNS provider that aligned with the same values. It’s:

  • Free for personal use (no limits on records or DNS features)
  • DNSSEC-enabled by default (for added security)
  • Super clean and fast to manage
  • Based in the EU, and run by a non-profit

I find it easier and more intuitive than most big-name DNS services I’ve tried. Subdomain management is also simple, which is handy for future things I want to host (like my photo hub and notes site).

🧰 What You Need

  • A domain name you own (e.g., yourdomain.com)
  • A Proton Mail account with custom domain support (Mail Plus or higher)
  • A free account at deSEC.io to manage your DNS records
  • Some patience—DNS changes can take up to an hour or two to fully update

🛠️ Step-by-Step Setup

1. Add Your Domain to Proton

In Proton Mail:

  • Go to Settings > Domains and click Add Domain
  • Enter your domain name
  • Proton will show you a list of DNS records you’ll need to add

2. Set Up DNS on deSEC

  • Sign into deSEC.io, and add your domain
  • Head to the “DNS Management” section
  • Add the records exactly as Proton shows

You’ll usually need:

  • âś… TXT record to verify domain ownership
  • âś… MX records to route email to Proton
  • âś… SPF record to say “Proton is allowed to send on my behalf”
  • âś… CNAMEs for DKIM – this helps receivers verify emails really came from you and weren’t tampered with
  • âś… DMARC – helps prevent spoofing and phishing, and tells other servers how to handle unverified messages

DKIM signs your messages with a hidden signature that proves they weren’t altered.
DMARC builds on SPF and DKIM to prevent forgery or misuse of your domain in email headers.

3. Wait and Verify

  • Give it some time—DNS changes can take 30–120 minutes
  • In Proton, click Verify on each section once DNS is updated
  • Use a tool like dnschecker.org or dig to see if the records are visible globally

4. Create Your Email Addresses

Once your domain is verified:

  • Add addresses like me@yourdomain.com, hello@yourdomain.com, or whatever you like
  • Optionally, turn on catch-all so you receive anything sent to *@yourdomain.com

✉️ What I Like About This Setup

  • No Google, no Outlook, no ads
  • Clean and ethical tools that respect privacy
  • I can use aliases like work@, family@, or archive@ as needed
  • It just works—my domain, my name, my rules

If you’re looking to take back some control of your digital life and want an email setup that reflects your values, this is a simple and honest place to start.