What is the MX record for Office 365? Check yours

See what the MX record for Office 365 is on your domain: paste any address there and read the host Microsoft gave it.

Try:

Only the domains are sent, to Cloudflare's public DNS. Nothing is stored.

Microsoft 365 MX recordMicrosoft 365 uses one MX record that points to a host named for your domain. Find your MX token in the Microsoft 365 admin center, under Domains. Give it the lowest preference number, and remove MX records that point to the old mail system once mail flows. Microsoft is moving these hosts to subdomains under mx.microsoft, for domains that turn on DNSSEC and for part of new domains from July 1, 2026.
  • <MX token>.mail.protection.outlook.comPriority 0 or 1 (lower than any other MX)The MX token comes from the Microsoft 365 admin center, under Domains.
  • <subdomain>.mx.microsoftDomains moved for DNSSEC, and part of new domains from July 1, 2026.

Source: learn.microsoft.com (opens in a new tab), learn.microsoft.com (opens in a new tab), techcommunity.microsoft.com (opens in a new tab). Checked Nov 10, 2026.

How the map reads MX records

Google Workspace MX records

Google Workspace uses one MX record. Domains set up before 2023 may still have older values that start with aspmx. Google says they still work, and that a working setup needs no change.

  • smtp.google.comPriority 1The current value
  • Values that start with aspmxOlder domains (before 2023). Still supported.

Source: knowledge.workspace.google.com (opens in a new tab). Checked Nov 10, 2026.

MX preference

Each MX record has a preference number. Senders try the lowest number first, so this map reads the host with the lowest number as the one that takes the mail.

Source: rfc-editor.org (opens in a new tab). Checked Nov 10, 2026.

No MX record

With no MX record, senders deliver to the domain's own address record, as if it were an MX with preference 0. Such a domain often runs no mailbox service at all.

Source: rfc-editor.org (opens in a new tab). Checked Nov 10, 2026.

Null MX

A single MX record with preference 0 and the host . says the domain accepts no email. Mail to it fails at once.

Source: rfc-editor.org (opens in a new tab). Checked Nov 10, 2026.

Any other MX host reads Other, with the host shown as it is.

Google Workspace

Google Workspace

MX smtp.google.com, or older values that start with aspmx.

Source: knowledge.workspace.google.com (opens in a new tab). Checked Nov 10, 2026.

Microsoft 365

Microsoft 365

MX <MX token>.mail.protection.outlook.com, or a subdomain under mx.microsoft.

Source: learn.microsoft.com (opens in a new tab), techcommunity.microsoft.com (opens in a new tab). Checked Nov 10, 2026.

Other named host

Zoho Mail

MX mx.zoho.com, mx2.zoho.com and mx3.zoho.com; the ending changes with the data center.

Source: zoho.com (opens in a new tab). Checked Nov 10, 2026.

Fastmail

MX in1-smtp.messagingengine.com and in2-smtp.messagingengine.com.

Source: fastmail.help (opens in a new tab). Checked Nov 10, 2026.

Proton Mail

MX mail.protonmail.ch and mailsec.protonmail.ch.

Source: proton.me (opens in a new tab). Checked Nov 10, 2026.

iCloud Mail

MX mx01.mail.icloud.com and mx02.mail.icloud.com.

Source: support.apple.com (opens in a new tab). Checked Nov 10, 2026.

Mailgun (inbound routes)

MX mxa.mailgun.org and mxb.mailgun.org.

Source: documentation.mailgun.com (opens in a new tab). Checked Nov 10, 2026.

Security gateway

Sophos Email

MX hosts under prod.hydra.sophos.com, or an eml100 subdomain of ctr.sophos.com.

Source: docs.sophos.com (opens in a new tab). Checked Nov 10, 2026.

Cisco Secure Email Cloud Gateway

MX hosts named for the customer's allocation under iphmx.com.

Source: docs.ces.cisco.com (opens in a new tab), docs.ces.cisco.com (opens in a new tab). Checked Nov 10, 2026.

Barracuda Email Gateway Defense

MX hosts ending in ess.barracudanetworks.com.

Source: documentation.campus.barracuda.com (opens in a new tab). Checked Nov 10, 2026.

Trend Micro Email Security

MX hosts ending in a regional name such as in.tmes.trendmicro.com, in.tmes.trendmicro.eu or in.tmems-jp.trendmicro.com.

Source: docs.trendmicro.com (opens in a new tab). Checked Nov 10, 2026.

Consumer mailbox domains: 12

Gmail

gmail.com, googlemail.com

Google's free mail. Mail to gmail.com and googlemail.com goes to the same place.

Source: support.google.com (opens in a new tab). Checked Nov 10, 2026.

Outlook.com

outlook.com, hotmail.com, live.com

Microsoft's free mail. Hotmail.com and Live.com accounts are reached through Outlook.com.

Source: support.microsoft.com (opens in a new tab). Checked Nov 10, 2026.

iCloud Mail

icloud.com, me.com, mac.com

Apple's free mail. iCloud addresses end in icloud.com, me.com or mac.com.

Source: support.apple.com (opens in a new tab). Checked Nov 10, 2026.

Proton Mail

proton.me, protonmail.com, pm.me, protonmail.ch

Proton's mail. Its own address domains are proton.me, protonmail.com, pm.me and protonmail.ch.

Source: proton.me (opens in a new tab). Checked Nov 10, 2026.

Photo of Utku Zihnioglu

By

· CEO & co-founder

Published Nov 11, 2026

Shorter page: the tool first, the answer in a few lines.

What is the MX record for Office 365? There is no single value to copy. Microsoft builds a host for each domain, a token of its own followed by mail.protection.outlook.com, with a lower preference number than any other MX record, and some domains now get a host under mx.microsoft instead. Paste any address at your domain to see which form it publishes.

Only the domain is sent, to Cloudflare's public DNS resolver. The address stays on this page, and nothing is stored.

How to read the result

If the map names Microsoft 365, mail reaches Exchange Online, in either form. If it names a security gateway, a filtering service takes the mail first, and Microsoft may sit behind it where DNS cannot show it.

If it names your old host, or Google Workspace, that host still has the lowest preference number, so it still gets the mail. Senders try the lowest number first, as RFC 5321, the SMTP standard, sets out.

What to do next

Once mail flows to Exchange Online, Microsoft's DNS records reference for Microsoft 365 says to remove the MX records that point at your old system. A leftover record with a higher number fails nothing until the day Microsoft does not answer, which is why it is easy to forget.

The MX record decides where mail to your domain lands, replies included. Whether receivers trust the mail you send rests on SPF, DKIM and DMARC, so run the domain through the SPF record lookup next.

Checking which prospects run on Microsoft 365? Paste their addresses into the bulk MX lookup instead.

Office 365 MX record: common questions

Where do I find my Office 365 MX token?

In the Microsoft 365 admin center, under Domains. Microsoft gives each domain its own token, so it is not a value you can copy from another domain or from an example online.

Is mx.microsoft the same as mail.protection.outlook.com?

Both are Microsoft 365 MX hosts. Microsoft is moving domains that turn on DNSSEC, and part of new domains, to hosts under mx.microsoft. The map reads either form as Microsoft 365.

Does an Office 365 MX record mean a company uses Outlook?

It means mail to that domain is delivered to Exchange Online, Microsoft 365's mail service. Which app people read it in, desktop Outlook, a phone or a browser, is something DNS cannot show.

About this article

Photo of Utku Zihnioglu

Utku Zihnioglu

CEO & co-founder

Serial entrepreneur who built infrastructure companies handling billions of requests. Now leads engineering at Oneprofile, which finds the people worth talking to, researches each one, and follows up until they reply.

Drafted with AI from our product docs and code. Utku Zihnioglu answers for what it says.

Check every prospect before the first send

Verify each address in a Oneprofile table before your first email reaches it.

Free plan: 200 credits a month, 3 integrations, no card

Check every prospect before the first send

Verify each address in a Oneprofile table before your first email reaches it.

Free plan: 200 credits a month, 3 integrations, no card