Setting up Microsoft 365 Business email for a domain hosted in cPanel involves several steps, from account creation to DNS configuration and mobile device setup. This guide explains the full process, including Microsoft signup, temporary onmicrosoft.com login, multi-factor authentication, cPanel DNS updates, and email testing.


Microsoft 365 signup and temporary login

Create your Microsoft 365 account

  1. Visit the official Microsoft 365 Business signup page.
  2. Enter your business details including name, email, and country.
  3. Microsoft will ask you to create a temporary domain such as yourname.onmicrosoft.com.
  4. You will then create an admin user with a temporary username like admin@yourname.onmicrosoft.com.

Sign in using the onmicrosoft.com account

  1. Go to https://admin.microsoft.com.
  2. Log in using the temporary onmicrosoft.com admin email and password.
  3. You will be required to set up Microsoft Authenticator for additional security.

Configure multi-factor authentication (MFA)

Microsoft requires multi-factor authentication for administrative accounts.

Setup steps for Microsoft Authenticator

  1. Install Microsoft Authenticator from the App Store (iOS) or Google Play Store (Android).
  2. After logging in to your temporary admin account, you will be prompted to set up MFA.
  3. Open the app and scan the QR code displayed on the Microsoft 365 setup page.
  4. Approve the test notification.
  5. Your account is now secured with MFA.

Add your domain to Microsoft 365

Start the domain wizard

  1. In the Microsoft 365 admin center, go to SetupDomains.
  2. Select Add domain.
  3. Enter your domain name (example: wenovia.co).
  4. Choose Add a TXT record to the domain’s DNS records.

Microsoft will provide a TXT record similar to:

Host/Name: @
Value: MS=ms123456789
TTL: 3600

You will add this inside cPanel later to verify ownership.


Update DNS records in cPanel

Access the DNS zone in cPanel

  1. Log in to your cPanel dashboard.
  2. Open Zone Editor under the Domains section.
  3. Select Manage for the domain.

Add the Microsoft-required DNS records

1. TXT verification record

Add the TXT record provided by Microsoft (MS=msxxxxxx).

2. SPF record

Microsoft recommends the following SPF entry:

v=spf1 include:spf.protection.outlook.com -all

If an SPF record already exists, merge Microsoft’s include directive instead of having two SPF entries.

3. MX record for email delivery

Delete any old MX entries and add:

Priority: 0
Destination: <domain-key>.mail.protection.outlook.com

The destination value is unique for each tenant.

4. Autodiscover CNAME

Add:

Name: autodiscover
Value: autodiscover.outlook.com

5. SRV records (required for Teams/Skype)

If Teams or Skype for Business is used, Microsoft will provide SRV entries such as:

_sip._tls 443 sipdir.online.lync.com
_sipfederationtls._tcp 5061 sipfed.online.lync.com

6. Optional but recommended: DKIM and DMARC

Enable DKIM in Microsoft 365 and add two CNAME records per instruction.
DMARC example:

v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com

DKIM, SPF, and DMARC


Examples of DNS (CNAME, TXT, MX) setup for regular domain-based webmail and cPanel hosting

DNS / Zone Editor

Search in your cPanel “DNS”, select Zone Editor, then click on “Manage” where you will be able to create, update, and delete DNS records (careful to delete only the cPanel default MX record exisiting and provided, necessary to have only one MS 365 MX record to avoid conflict).

cpanel-DNS-editor-management

Zone Record > MX records

  1. Filter by MX records (click on the MX filter tab link) to only view the MX records
  2. Delete any existing MX record
  3. Add the provided MS 365 record, e.g., doman-com.mail.protection.outlook.com (take note of the dash, not the dot, before the COM TLD)
  4. Similar TTL value to the other deleted MX DNS record provided by your cPanel by default

cpanel-MS-365-webmail-DNS-Zone-Editor-mail-protection-outlook

Zone Record > TXT records

  1. Filter to display only TXT records
  2. Add the provided MS 365 record, e.g., doman-com.mail.protection.outlook.com (take note of the dash, not the dot, before the COM TLD)
  3. Similar TTL value to the other TXT DNS records provided by your cPanel by default
  4. Examples of TXT records needed for MS 365:
    • v=spf1 include:spf.protection.outlook.com -all
    • SPF, DMARC, and DKIM are necessary to have these; ask for webhosting support if these are not present yet.
      These three DNS records help verify that your domain’s email is legitimate. They prevent spoofing, phishing, and spam issues.
    • Any other unique TXT records provided during your MS 365 signup and verification steps

cpanel-MS-365-webmail-DNS-Zone-Editor-TXT-records

Zone Record > CNAME

  1. Filter to display only CNAME records
  2. Add the provided MS 365 record, for example:
    autodiscover.yourdomain.com.
    14400
    CNAME
    autodiscover.outlook.com
  3. Similar TTL value to the CNAME DNS record provided by your cPanel by default

cpanel-MS-365-webmail-DNS-Zone-Editor-autodiscover-outlook


Verify your domain in Microsoft 365

After updating DNS in cPanel:

  1. Return to the Microsoft 365 admin center.
  2. Click Verify.
  3. Verification may complete instantly or may take several minutes depending on DNS propagation.

Create users and mailboxes

Once the domain is verified:

  1. Open UsersActive users.
  2. Add users such as info@yourdomain.com, sales@yourdomain.com, etc.
  3. Assign email licenses (Microsoft 365 Business Basic, Standard, or Exchange Online Plan).

Set up email on iOS and Android devices

iOS setup (iPhone or iPad)

  1. Go to SettingsMailAccountsAdd Account.
  2. Choose Microsoft Exchange.
  3. Enter the email address (example: info@yourdomain.com).
  4. Tap Sign In.
  5. The device will redirect to the Microsoft sign-in page.
  6. Enter the password and verify using Microsoft Authenticator.
  7. Choose which data to sync (Mail, Contacts, Calendars).
  8. Save the configuration.

Android setup

  1. Install Outlook for Android (recommended).
  2. Open Outlook and select Add Account.
  3. Enter the Microsoft 365 email address.
  4. Authenticate using the Microsoft sign-in page and MFA.
  5. Outlook for Android will automatically configure server settings.

Test email sending and receiving

To confirm that your DNS and mailbox configurations are correct:

  1. Send an email from an external provider (Gmail, Yahoo, etc.) to your Microsoft 365 email.
  2. Confirm the message is received in Outlook or on your mobile device.
  3. Reply using the Microsoft 365 mailbox and confirm delivery.
  4. Use Microsoft’s message trace tool in the admin center if there are delays or failures.
  5. Send a test to mail-tester.com or similar services to check SPF, DKIM, and DMARC performance.

Recommendations and best practices

Set cPanel Email Routing correctly

In cPanel → Email Routing, select Remote Mail Exchanger to ensure email traffic is routed to Microsoft 365 only.

Remove old DNS entries

Delete outdated MX, SPF, autodiscover, or webmail-related records to avoid conflicts.

Enable DKIM and DMARC

These records improve deliverability and reduce spam issues.

Use the Outlook apps

Outlook for iOS and Android offers the most reliable performance with Microsoft 365 features.

Retain the onmicrosoft.com admin account

Do not delete the default admin user. It serves as a fallback if domain issues occur.


Summary

Setting up Microsoft 365 Business email for a domain hosted in cPanel involves creating your Microsoft account, verifying your domain with TXT records, configuring all required MX and CNAME entries, enabling security features such as MFA, and ensuring proper email routing. Once DNS propagates, mailboxes can be added and configured on iOS and Android devices. Following the steps above ensures reliable email delivery, secure authentication, and full integration of Microsoft 365 services with your domain.

Why Use Microsoft 365, instead of the MS Individual Plan

Added resource on when to use Microsoft 365 instead of Microsoft Individual Plan, fully explained:
Why businesses should use Microsoft 365 Business instead of Microsoft 365 Individual