Source configuration
Set up SPF and DKIM for the tools that send as you.
Google Workspace SPF and DKIM setup
Publish SPF, turn on DKIM, and avoid the two-step activation trap that quietly leaves Google Workspace mail unsigned.
Microsoft 365 SPF and DKIM setup
The exact SPF record, the two DKIM CNAMEs to copy out of the Defender portal, and the onmicrosoft.com alignment trap that fails your mail.
Amazon SES SPF and DKIM setup
Why Easy DKIM, not the SPF include everyone pastes, is what aligns SES mail, plus the custom MAIL FROM and the per-region trap.
Twilio SendGrid SPF and DKIM setup
Run Domain Authentication, publish the CNAMEs SendGrid generates, and dodge the DNS host trap that doubles your record names.
Mailchimp SPF and DKIM setup
Authenticate your domain (not just verify it) with two CNAMEs, and why Mailchimp's old SPF step is gone.
Klaviyo SPF and DKIM setup
Set up a branded sending domain, send from your root domain (not the subdomain), and skip the SPF record you do not need.
HubSpot SPF and DKIM setup
Connect your email sending domain, copy the two DKIM CNAMEs and SPF from the console, and clear the gate that blocks sending as your domain.
Mailgun SPF and DKIM setup
Publish SPF and DKIM on your sending subdomain, use the right DKIM selector, and avoid the from-address trap that breaks alignment.
Postmark SPF and DKIM setup
Publish DKIM and the Return-Path CNAME, skip SPF, and learn why an SPF-fail in your DMARC reports is expected and harmless.
Brevo SPF and DKIM setup
Authenticate your domain (formerly Sendinblue), publish the Brevo code and DKIM records, and keep the records you must never delete.
Constant Contact SPF and DKIM setup
Turn on self-authentication with two DKIM CNAMEs, skip SPF, and fix the silent from-address rewrite that means you are not done yet.
ActiveCampaign SPF and DKIM setup
Publish the two DKIM CNAMEs, let ActiveCampaign handle SPF, and clear the Verified-is-not-aligned trap that fails DMARC.
Salesforce SPF and DKIM setup
Which records you publish depends on which Salesforce you send from: Sales and Service Cloud, Account Engagement (Pardot), or Marketing Cloud.
Zoho SPF and DKIM setup
Zoho Mail and Zoho Campaigns have separate setups: the records for each, the region-specific Campaigns include, and why one does not cover the other.
Zendesk SPF and DKIM setup
Make Zendesk send support mail as your domain: the two DKIM CNAMEs, the enable-DKIM-last rule, and the DMARC step Zendesk skips.
Shopify SPF and DKIM setup
Authenticate your sender domain with the CNAMEs that handle DKIM and SPF, and stop the silent rewrite to shopifyemail.com.
Intercom SPF and DKIM setup
Publish the two CNAMEs that align both SPF and DKIM, and learn why verifying an address is not authenticating the domain.
MailerLite SPF and DKIM setup
Publish the litesrv DKIM CNAME plus SPF, and dodge the appended-domain trap that breaks the records.
GetResponse SPF and DKIM setup
Publish the DKIM TXT record, skip the optional SPF, and avoid the status that quietly sends via GetResponse.
Campaign Monitor SPF and DKIM setup
Publish the cm DKIM TXT plus SPF and DMARC, and know why a verified domain is not signing for the first 30 minutes.
AWeber SPF and DKIM setup
Publish the three DKIM CNAMEs, skip SPF, and avoid the free-address rewrite that strips your branding.
Kit (ConvertKit) SPF and DKIM setup
Set up a Verified Sending Domain with two CNAMEs (still ck-prefixed after the rebrand) that align both SPF and DKIM.
Mailjet SPF and DKIM setup
Publish the SPF include and the mailjet._domainkey DKIM record, and validate the whole domain, not just an address.
SparkPost SPF and DKIM setup
Publish the scph DKIM record that aligns by default, plus the optional SPF include and bounce domain for SPF alignment.
Freshdesk SPF and DKIM setup
Make Freshdesk send support mail as your domain: the four fwdkim CNAMEs, the forwarding, and why DKIM is now mandatory.
Marketo SPF and DKIM setup
Publish SPF and DKIM for Adobe Marketo Engage, and learn why DKIM (not the SPF include) is what carries DMARC.
Front SPF and DKIM setup
Find out which Front channel needs SPF and DKIM, copy the records from the Deliverability panel, and use relaxed alignment.
Help Scout SPF and DKIM setup
Publish the two fixed strong1 and strong2 DKIM CNAMEs, skip SPF, and avoid the DNS-proxy setting that breaks signing.
SMTP2GO SPF and DKIM setup
Verify your sender domain with three CNAMEs that handle SPF, DKIM, and tracking, with no SPF include to add.
Pipedrive SPF and DKIM setup
Email sync needs no DNS; Pipedrive Campaigns needs domain authentication. The records, and the verify-sender trap.
More in the Knowledge Base
Stop guessing. Start monitoring.
Free for one domain. Set up in five minutes. We parse the reports; you read plain-English summaries.