How to set up business email in the UAE

Choose the domain your email will live on

Your business email address is only as credible as the domain behind it. In the UAE you have two practical routes: a .ae domain, registered through an accredited registrar and requiring a trade licence or trademark, or a generic .com domain, which anyone can register in minutes.

A .ae domain signals a local presence and is often expected by government entities and larger UAE buyers. A .com is easier to obtain and travels better if you sell outside the region. Many companies register both, use one as the primary mailbox domain, and redirect the other.

• Register the domain in the company name, not an employee's personal account.
• Keep registrar access separate from your web developer's account.
• Turn on registrar lock and auto renew so email never stops because of an expiry.

Decide how many mailboxes you actually need

Count real humans first, then add shared addresses. A typical UAE SME of eight people ends up with eight personal mailboxes plus info@, sales@, and accounts@. Shared addresses can be aliases (free on most platforms) rather than paid mailboxes, unless several people need to reply from them independently.

Storage matters more than most people expect. UAE trade documents, invoices, delivery notes, and design files arrive as attachments and stay in the mailbox for years. A 2GB mailbox on a cheap plan usually fills within 18 months, and then either mail bounces or older mail gets deleted.

• One paid mailbox per person who sends mail.
• Aliases for departmental addresses where one person replies.
• Plan for at least 10GB per mailbox if you handle documents or invoices.

Pick a hosting provider and mailbox plan

Free tiers effectively no longer exist for custom domains, so the choice is between global suites (Google Workspace, Microsoft 365), lightweight providers (Zoho and similar), and regional email hosts. Global suites bundle document tools you may already pay for elsewhere. Lightweight providers cut the price by cutting mailbox size and, often, IMAP access on the entry tier.

Check three things before you commit: whether full IMAP is included (without it you cannot use Outlook, Apple Mail, or Thunderbird properly), how much storage each mailbox gets, and how fast a real person answers support when mail stops flowing.

• Full IMAP and SMTP on every plan, not just the top tier.
• Storage stated per mailbox, with a clear price to add more.
• A published uptime SLA and daily backups.
• Free assisted migration of existing mail, contacts, and calendars.

Point your domain's MX records at the mail host

MX (Mail Exchange) records tell the internet which servers accept mail for your domain. Your provider gives you one or more MX hostnames with priority numbers, where the lowest number is tried first.

Delete old MX records left over from a previous host or from your web hosting package. Two competing sets of MX records is the single most common cause of mail arriving in the wrong place during a UAE email migration.

; Example MX records (values come from your provider)
example.ae.    3600    IN    MX    10    mx1.provider.net.
example.ae.    3600    IN    MX    20    mx2.provider.net.

Add an SPF record so your mail is accepted

SPF (Sender Policy Framework) is a DNS TXT record that lists which servers are allowed to send mail using your domain. Without it, Gmail and Outlook treat your mail as suspicious and it lands in spam.

You get exactly one SPF record per domain. If you also send from a CRM, an invoicing tool, or a marketing platform, include all of them in that single record, then end with ~all (soft fail) while testing and -all (hard fail) once you are confident.

; One SPF record only, all senders included
example.ae.    3600    IN    TXT    "v=spf1 include:_spf.provider.net include:_spf.yourcrm.com ~all"

Enable DKIM to sign every outgoing message

DKIM (DomainKeys Identified Mail) adds a cryptographic signature to each message so the receiving server can prove the mail was not altered and really came from your domain. Your provider generates a key pair, keeps the private key, and gives you a public key to publish as a TXT record on a selector subdomain.

Publish the record, then turn on signing in the provider's control panel. Send a test message to a Gmail address, open it, and check that the message shows your domain as both the sender and the signer.

; DKIM public key, published on a selector
sel1._domainkey.example.ae.    3600    IN    TXT    "v=DKIM1; k=rsa; p=MIIBIjANBgkq..."

Publish a DMARC policy and read the reports

DMARC ties SPF and DKIM together and tells receiving servers what to do when a message fails both. It also asks them to send you aggregate reports, which is how you discover that a supplier portal or an old marketing tool has been sending as your domain for years.

Start at p=none for two to four weeks, read the reports, fix any legitimate sender that fails, then move to p=quarantine and finally p=reject. Going straight to reject on day one is how UAE businesses accidentally block their own invoices.

; Start permissive, tighten once reports are clean
_dmarc.example.ae.    3600    IN    TXT    "v=DMARC1; p=none; rua=mailto:dmarc@example.ae; fo=1"

Migrate existing mail, then connect your devices

If you already have mail elsewhere, migrate before you switch MX records, not after. A good provider copies mail over IMAP while the old mailbox stays live, then does a short second pass to catch anything that arrived during the cutover, so nothing is lost.

Once mail flows, set each device up with IMAP rather than POP. IMAP keeps every device in sync, leaves mail on the server, and means a lost phone does not take your only copy of a contract with it.

• Migrate first, cut over MX second, verify third.
• Use IMAP on desktop and mobile, never POP.
• Send a test to a Gmail and an Outlook address and check headers for SPF, DKIM, and DMARC passes.
• Confirm your backup schedule with the provider in writing.