Source configuration. Set up SPF and DKIM for the tools that send as you.
92 guides in this section of the Knowledge Base. For the concepts first, start with Learn.
No guide in this section matches that. The other sections are linked above.
Every guide. In one list.
92 guides
Google Workspace SPF and DKIM setupThe SPF include, the google._domainkey TXT, and the Start authentication click people miss.
Microsoft 365 SPF and DKIM setupThe SPF record, the two Defender portal CNAMEs, and the onmicrosoft.com alignment trap.
Amazon SES SPF and DKIM setupThe three Easy DKIM CNAMEs that align, the custom MAIL FROM for SPF, and the per-Region trap.
Twilio SendGrid SPF and DKIM setupThe three CNAMEs and DMARC TXT from Domain Authentication, and the appended-domain trap.
Mailchimp SPF and DKIM setupTwo DKIM CNAMEs, no SPF step, and why verified is not authenticated.
Klaviyo SPF and DKIM setupA branded sending subdomain, a root-domain From address, and no SPF record of yours.
HubSpot SPF and DKIM setupTwo DKIM CNAMEs and an SPF include from the console, plus the From rewrite until connected.
Mailgun SPF and DKIM setupThe records on your sending subdomain, and the From address that keeps them aligned.
Postmark SPF and DKIM setupThe DKIM record, the pm-bounces CNAME, and why Postmark asks for no SPF include.- Brevo SPF and DKIM setupThe Brevo code, the DKIM record, why SPF waits for a dedicated IP, and the records to keep.
- Constant Contact SPF and DKIM setupTwo DKIM CNAMEs, no SPF step, and the ccsend.com rewrite that means you are not done.
- ActiveCampaign SPF and DKIM setupThe two DKIM CNAMEs, the return-path CNAME, and the Verified-is-not-aligned trap.
Salesforce SPF and DKIM setupWhich Salesforce product you send from decides the records, and DKIM carries DMARC.- Zoho SPF and DKIM setupZoho Mail and Zoho Campaigns need separate records; one setup does not cover the other.
Zendesk SPF and DKIM setupThe SPF include, two DKIM CNAMEs, enable signing last, and the DMARC step Zendesk skips.- Shopify SPF and DKIM setupThe CNAMEs that cover DKIM and SPF, one DMARC record, and the rewrite to shopifyemail.com.
- Intercom SPF and DKIM setupThe two CNAMEs that align both SPF and DKIM, and the validate click people skip.
- MailerLite SPF and DKIM setupThe litesrv DKIM CNAME, the SPF and verification TXTs, and the appended-domain trap.
- GetResponse SPF and DKIM setupThe DKIM TXT from the pop-up, the optional SPF, and the via GetResponse-mail.com sign.
- Campaign Monitor SPF and DKIM setupThe cm DKIM TXT, the SPF include, the required DMARC, and the TTL wait before a re-check.
- AWeber SPF and DKIM setupThe three AWeber DKIM CNAMEs, why there is no SPF record, and the public-address trap.
- Kit (ConvertKit) SPF and DKIM setupThe two ck-prefixed CNAMEs that put Kit's return-path and DKIM on your domain.
- Mailjet SPF and DKIM setupThe SPF include and mailjet._domainkey TXT, and why one address is not the domain.
- SparkPost SPF and DKIM setupThe DKIM TXT that aligns by default and the return-path CNAME that covers SPF.
- Freshdesk SPF and DKIM setupFour fwdkim CNAMEs, the forwarding Freshdesk needs, and why it calls DKIM mandatory.
- Marketo SPF and DKIM setupThe mktomail.com include, the DKIM that carries DMARC, and the SPF-verified trap.
- Front SPF and DKIM setupWhich Front channel needs records, where to copy them, and why alignment must stay relaxed.
- Help Scout SPF and DKIM setupTwo fixed strong1 and strong2 CNAMEs, no SPF record, and the DNS proxy that breaks DKIM.
- SMTP2GO SPF and DKIM setupThree CNAMEs for SPF, DKIM, and tracking, and the verified-sender rule since April 2025.
- Pipedrive SPF and DKIM setupSync needs no DNS; Campaigns needs three CNAMEs, a DMARC TXT, and a verified sender.
- Drip SPF and DKIM setupThree CNAMEs, no SPF include, and the s1/s2 selector clash that keeps Drip from verifying.
- Mandrill SPF and DKIM setupThe mte1 and mte2 CNAMEs, the DMARC Mandrill insists on, and the return-path option.
- MailerSend SPF and DKIM setupOne SPF TXT, two DKIM CNAMEs, and the mta return-path that makes SPF align.
- Resend SPF and DKIM setupThe resend._domainkey TXT and the MX and SPF records on the send subdomain.
- Customer.io SPF and DKIM setupFour records on a cio subdomain, DMARC at the root, and the strict tag that breaks it.
- SocketLabs SPF and DKIM setupThe bounce-domain CNAME that aligns SPF, and the DKIM CNAME or TXT key.
- Iterable SPF and DKIM setupWhere Iterable keeps the records, and why one setting regenerates them all.
- Pardot SPF and DKIM setupThe validation key, the DomainKey TXT, and why SPF never aligns for Pardot.
- Fastmail SPF and DKIM setupMX, the messagingengine SPF include, three fm DKIM CNAMEs, and the ?all in Fastmail's record.
- Proton Mail SPF and DKIM setupMX, SPF, and three DKIM CNAMEs that let Proton rotate keys for you.
- IONOS SPF and DKIM setupThe regional SPF include, the three DKIM CNAMEs, and what moving your name servers breaks.
- Rackspace Email SPF and DKIM setupThe emailsrvr.com include, the DKIM switch, and the TXT record you publish yourself.
- Mimecast SPF and DKIM setupThe regional include, the signing definition plus policy, and the unsaved-key mistake.
- Barracuda Email Gateway Defense SPF and DKIM setupBarracuda's regional SPF include, DKIM signed before the relay, and the footer that breaks it.
- Loops SPF and DKIM setupSPF and MX on an envelope subdomain, DKIM beside them, and the priority people drop.
- Proofpoint Essentials SPF and DKIM setupThe per-region SPF include and the 2048-bit DKIM key you generate and verify in the console.
- Gorgias SPF and DKIM setupThe gor and gor2 DKIM CNAMEs, the em return path, and why some accounts get TXT records.
- Bird SPF and DKIM setupThe DKIM TXT and the send. return-path CNAME; no apex SPF include is ever needed.
- Squarespace SPF and DKIM setupOne DKIM CNAME and a generated _dmarc TXT, with no SPF record to add.
- Sender SPF and DKIM setupThe sendersrv.com include, the sender._domainkey CNAME, and the two weak defaults to fix.
- BigCommerce SPF and DKIM setupOne SPF include, no DKIM record to add, and why SPF alone carries your order mail.
- Mailtrap SPF and DKIM setupFour CNAMEs, the rwmt1 and rwmt2 selectors, and no SPF include to hunt for.
- SMTP.com SPF and DKIM setupThe _spf.smtp.com include, the smtpkey CNAME, and the support step that turns signing on.
- Emarsys SPF and DKIM setupThe SPF include, the key5 and key6 CNAMEs, and the bounces CNAME that makes SPF align.
- Yandex 360 SPF and DKIM setupMX, the redirect= SPF, the mail._domainkey key, and the second-sender trap.
- Kayako SPF and DKIM setupThe SPF include, the three CNAMEs, and why the DKIM box waits for DNS.
- Wix SPF and DKIM setupThe CNAMEs Wix asks for, and why its fifth record wants your _dmarc name.
- Netcore Email API SPF and DKIM setupSPF, DKIM and an envelope CNAME from your dashboard, then a review before sending.
- Greenhouse SPF and DKIM setupWhy Greenhouse puts its records on a gh-mail subdomain, and the MX that subdomain needs.
- HappyFox SPF and DKIM setupThe SPF include, two DKIM CNAMEs, and the HappyFox address an unverified channel sends from.
- DocuSign SPF and DKIM setupClaim the domain, add a subdomain, publish two DKIM CNAMEs, SPF, and MX from DocuSign Admin.
- Lever SPF and DKIM setupNo Lever record to publish: candidate mail leaves through each recruiter's mailbox.
- Omnisend SPF and DKIM setupMailgun-shaped SPF, DKIM and DMARC records, and the sender address rule behind them.
- Moosend SPF and DKIM setupOne include, the ms selector key, and the all-at-once check that needs DMARC.
- SendPulse SPF and DKIM setupThe mxsspf.sendpulse.com include, the sign._domainkey key, and the From-domain rule.
- Benchmark Email SPF and DKIM setupTwo account-specific Benchmark CNAMEs, the DMARC record it insists on, and the From rewrite.
- Elastic Email SPF and DKIM setupThe SPF include, the api DKIM TXT, and the bounce-domain CNAME that makes SPF align.
- Braze SPF and DKIM setupWhich SendGrid, SparkPost, or SES records Braze hands you, and why your apex only gets DMARC.
- Salesforce Marketing Cloud SPF and DKIM setupDelegate the sending subdomain or publish its zone file, then check its DMARC rua.
- Atlassian SPF and DKIM setupAtlassian's five records, the address pick in Jira and Confluence, and the early-switch trap.
- Calendly SPF and DKIM setupCalendly has no DNS records; only invitations and connected Gmail or Outlook send as you.
- Typeform SPF and DKIM setupThe Mailgun-backed records for an Automation email domain, and what stays on Typeform.
- Substack SPF and DKIM setupEvery post leaves from substack.com, so there is nothing to publish for your domain.
- beehiiv SPF and DKIM setupThe beehiiv ownership record and email CNAMEs, the DMARC it requires, and the wait for Live.
- Ghost SPF and DKIM setupA custom sending domain on Ghost(Pro) or Mailgun's records on self-hosted Ghost, plus DMARC.
- Mailmodo SPF and DKIM setupA DKIM TXT, a bounce CNAME and a DMARC TXT per domain, with no SPF include.
- Dotdigital SPF and DKIM setupA new subdomain delegated to Dotdigital, and the DMARC reports that go to Dotdigital, not you.
- Ortto SPF and DKIM setupThree CNAMEs from Custom domains, an optional SPF include, and the silent fallback.
- SendLayer SPF and DKIM setupFive records on the sl subdomain, and why relaxed alignment has to stay.
- Amazon WorkMail SPF and DKIM setupWorkMail's record page, the MAIL FROM that aligns SPF, and the March 2027 end of support.
- iCloud Mail SPF and DKIM setupThe include:icloud.com SPF, the sig1 DKIM CNAME with your domain inside it, and the MX swap.
- Namecheap Private Email SPF and DKIM setupMX, SPF and a pasted DKIM key, under the selector your subscription date decides.
- Keap SPF and DKIM setupThree app-named CNAMEs, the SPF include, and the free-mail From address Keap rewrites.
- Ontraport SPF and DKIM setupAn Entri-published DKIM CNAME, the From-address step, and the quiet ontramail.com fallback.
- EmailOctopus SPF and DKIM setupFour CNAMEs and a DMARC TXT, the eom return path, and why Verified beats Partially verified.
- Buttondown SPF and DKIM setupDelegate a subdomain with two NS records, or publish Buttondown's manual Postmark records.
- Sendy SPF and DKIM setupSendy sends through Amazon SES, so the records to publish are SES records.
- WordPress SPF and DKIM setupRoute wp_mail through a mailer that signs as you; a forced From alone makes it worse.
- Webflow SPF and DKIM setupForm notifications leave from a Webflow address, so there is nothing to publish.
- Hostinger Email SPF and DKIM setupTwo MX hosts, one SPF include, three hostingermail DKIM CNAMEs, and the Titan Email mix-up.
- Okta SPF and DKIM setupFour records on a subdomain, three of them SendGrid CNAMEs, and the fallback to okta.com.
- Auth0 SPF and DKIM setupAuth0 sends through the provider you connect; whose records you publish and the From trap.
Start with one domain. See it with your own data.
Free for one domain, no card. Add one DNS record and the first reports usually arrive within a day.