Source configuration
Set up SPF and DKIM for the tools that send as you.
Google Workspace SPF and DKIM setup
Publish SPF, turn on DKIM, and avoid the two-step activation trap that quietly leaves Google Workspace mail unsigned.
Microsoft 365 SPF and DKIM setup
The exact SPF record, the two DKIM CNAMEs to copy out of the Defender portal, and the onmicrosoft.com alignment trap that fails your mail.
Amazon SES SPF and DKIM setup
Why Easy DKIM, not the SPF include everyone pastes, is what aligns SES mail, plus the custom MAIL FROM and the per-region trap.
Twilio SendGrid SPF and DKIM setup
Run Domain Authentication, publish the CNAMEs SendGrid generates, and dodge the DNS host trap that doubles your record names.
Mailchimp SPF and DKIM setup
Authenticate your domain (not just verify it) with two CNAMEs, and why Mailchimp's old SPF step is gone.
Klaviyo SPF and DKIM setup
Set up a branded sending domain, send from your root domain (not the subdomain), and skip the SPF record you do not need.
HubSpot SPF and DKIM setup
Connect your email sending domain, copy the two DKIM CNAMEs and SPF from the console, and clear the gate that blocks sending as your domain.
Mailgun SPF and DKIM setup
Publish SPF and DKIM on your sending subdomain, use the right DKIM selector, and avoid the from-address trap that breaks alignment.
Postmark SPF and DKIM setup
Publish DKIM and the Return-Path CNAME, skip SPF, and learn why an SPF-fail in your DMARC reports is expected and harmless.
Brevo SPF and DKIM setup
Authenticate your domain (formerly Sendinblue), publish the Brevo code and DKIM records, and keep the records you must never delete.
Constant Contact SPF and DKIM setup
Turn on self-authentication with two DKIM CNAMEs, skip SPF, and fix the silent from-address rewrite that means you are not done yet.
ActiveCampaign SPF and DKIM setup
Publish the two DKIM CNAMEs, let ActiveCampaign handle SPF, and clear the Verified-is-not-aligned trap that fails DMARC.
Salesforce SPF and DKIM setup
Which records you publish depends on which Salesforce you send from: Sales and Service Cloud, Account Engagement (Pardot), or Marketing Cloud.
Zoho SPF and DKIM setup
Zoho Mail and Zoho Campaigns have separate setups: the records for each, the region-specific Campaigns include, and why one does not cover the other.
Zendesk SPF and DKIM setup
Make Zendesk send support mail as your domain: the two DKIM CNAMEs, the enable-DKIM-last rule, and the DMARC step Zendesk skips.
Shopify SPF and DKIM setup
Authenticate your sender domain with the CNAMEs that handle DKIM and SPF, and stop the silent rewrite to shopifyemail.com.
Intercom SPF and DKIM setup
Publish the two CNAMEs that align both SPF and DKIM, and learn why verifying an address is not authenticating the domain.
MailerLite SPF and DKIM setup
Publish the litesrv DKIM CNAME plus SPF, and dodge the appended-domain trap that breaks the records.
GetResponse SPF and DKIM setup
Publish the DKIM TXT record, skip the optional SPF, and avoid the status that quietly sends via GetResponse.
Campaign Monitor SPF and DKIM setup
Publish the cm DKIM TXT plus SPF and DMARC, and know why a verified domain is not signing for the first 30 minutes.
More in the Knowledge Base
Stop guessing. Start monitoring.
Free for one domain. Set up in five minutes. We parse the reports; you read plain-English summaries.