Source configuration
Set up SPF and DKIM for the tools that send as you.
Google Workspace SPF and DKIM setup
Publish SPF, turn on DKIM, and avoid the two-step activation trap that quietly leaves Google Workspace mail unsigned.
Microsoft 365 SPF and DKIM setup
The exact SPF record, the two DKIM CNAMEs to copy out of the Defender portal, and the onmicrosoft.com alignment trap that fails your mail.
Amazon SES SPF and DKIM setup
Why Easy DKIM, not the SPF include everyone pastes, is what aligns SES mail, plus the custom MAIL FROM and the per-region trap.
Twilio SendGrid SPF and DKIM setup
Run Domain Authentication, publish the CNAMEs SendGrid generates, and dodge the DNS host trap that doubles your record names.
Mailchimp SPF and DKIM setup
Authenticate your domain (not just verify it) with two CNAMEs, and why Mailchimp's old SPF step is gone.
Klaviyo SPF and DKIM setup
Set up a branded sending domain, send from your root domain (not the subdomain), and skip the SPF record you do not need.
HubSpot SPF and DKIM setup
Connect your email sending domain, copy the two DKIM CNAMEs and SPF from the console, and clear the gate that blocks sending as your domain.
Mailgun SPF and DKIM setup
Publish SPF and DKIM on your sending subdomain, use the right DKIM selector, and avoid the from-address trap that breaks alignment.
Postmark SPF and DKIM setup
Publish DKIM and the Return-Path CNAME, skip SPF, and learn why an SPF-fail in your DMARC reports is expected and harmless.
Brevo SPF and DKIM setup
Authenticate your domain (formerly Sendinblue), publish the Brevo code and DKIM records, and keep the records you must never delete.
Constant Contact SPF and DKIM setup
Turn on self-authentication with two DKIM CNAMEs, skip SPF, and fix the silent from-address rewrite that means you are not done yet.
ActiveCampaign SPF and DKIM setup
Publish the two DKIM CNAMEs, let ActiveCampaign handle SPF, and clear the Verified-is-not-aligned trap that fails DMARC.
Salesforce SPF and DKIM setup
Which records you publish depends on which Salesforce you send from: Sales and Service Cloud, Account Engagement (Pardot), or Marketing Cloud.
Zoho SPF and DKIM setup
Zoho Mail and Zoho Campaigns have separate setups: the records for each, the region-specific Campaigns include, and why one does not cover the other.
Zendesk SPF and DKIM setup
Make Zendesk send support mail as your domain: the two DKIM CNAMEs, the enable-DKIM-last rule, and the DMARC step Zendesk skips.
Shopify SPF and DKIM setup
Authenticate your sender domain with the CNAMEs that handle DKIM and SPF, and stop the silent rewrite to shopifyemail.com.
Intercom SPF and DKIM setup
Publish the two CNAMEs that align both SPF and DKIM, and learn why verifying an address is not authenticating the domain.
MailerLite SPF and DKIM setup
Publish the litesrv DKIM CNAME plus SPF, and dodge the appended-domain trap that breaks the records.
GetResponse SPF and DKIM setup
Publish the DKIM TXT record, skip the optional SPF, and avoid the status that quietly sends via GetResponse.
Campaign Monitor SPF and DKIM setup
Publish the cm DKIM TXT plus SPF and DMARC, and know why a verified domain is not signing for the first 30 minutes.
AWeber SPF and DKIM setup
Publish the three DKIM CNAMEs, skip SPF, and avoid the free-address rewrite that strips your branding.
Kit (ConvertKit) SPF and DKIM setup
Set up a Verified Sending Domain with two CNAMEs (still ck-prefixed after the rebrand) that align both SPF and DKIM.
Mailjet SPF and DKIM setup
Publish the SPF include and the mailjet._domainkey DKIM record, and validate the whole domain, not just an address.
SparkPost SPF and DKIM setup
Publish the scph DKIM record that aligns by default, plus the optional SPF include and bounce domain for SPF alignment.
Freshdesk SPF and DKIM setup
Make Freshdesk send support mail as your domain: the four fwdkim CNAMEs, the forwarding, and why DKIM is now mandatory.
Marketo SPF and DKIM setup
Publish SPF and DKIM for Adobe Marketo Engage, and learn why DKIM (not the SPF include) is what carries DMARC.
Front SPF and DKIM setup
Find out which Front channel needs SPF and DKIM, copy the records from the Deliverability panel, and use relaxed alignment.
Help Scout SPF and DKIM setup
Publish the two fixed strong1 and strong2 DKIM CNAMEs, skip SPF, and avoid the DNS-proxy setting that breaks signing.
SMTP2GO SPF and DKIM setup
Verify your sender domain with three CNAMEs that handle SPF, DKIM, and tracking, with no SPF include to add.
Pipedrive SPF and DKIM setup
Email sync needs no DNS; Pipedrive Campaigns needs domain authentication. The records, and the verify-sender trap.
Drip SPF and DKIM setup
Three CNAMEs, no SPF include, and the s1/s2 selector clash that keeps Drip from verifying.
Mandrill SPF and DKIM setup
Mailchimp's transactional product: two mte1/mte2 DKIM CNAMEs, a required DMARC record, and no SPF include.
MailerSend SPF and DKIM setup
Two DKIM CNAMEs, one SPF include, and the mta return-path record that makes MailerSend SPF align.
Resend SPF and DKIM setup
The resend._domainkey DKIM TXT, the send-subdomain MX and SPF, and why root SPF is the wrong place.
Customer.io SPF and DKIM setup
Four records on a cio##### subdomain, DMARC on the root, and the strict-alignment tag that breaks it.
SocketLabs SPF and DKIM setup
SPF include, CNAME or TXT DKIM, and the bounce domain that stops the 'via email-od.com' label.
Iterable SPF and DKIM setup
Iterable's records live on Settings > DNS Setup; one sending domain by default, and the toggle resets verification.
Pardot SPF and DKIM setup
Verify the domain, publish the DomainKey TXT, skip the SPF include: Pardot passes DMARC on DKIM alone.
Fastmail SPF and DKIM setup
MX, the messagingengine SPF include, three fm._domainkey CNAMEs, and why Fastmail's SPF ends in ?all.
Proton Mail SPF and DKIM setup
MX, SPF, and the three rotating DKIM CNAMEs for a Proton Mail custom domain, plus the legacy TXT key trap.
IONOS SPF and DKIM setup
Regional SPF include, three DKIM CNAMEs for external DNS, and the name-server move that silently drops DKIM.
Rackspace Email SPF and DKIM setup
The emailsrvr.com SPF include, the DKIM switch in the Cloud Office Control Panel, and the DNS-host catch.
Mimecast SPF and DKIM setup
Regional _netblocks include, the Outbound Signing definition plus policy for DKIM, and the unsaved-key trap.
Barracuda Email Gateway Defense SPF and DKIM setup
The regional Barracuda SPF include, why DKIM stays on your mail platform, and the footer that breaks it.
Loops SPF and DKIM setup
Loops puts SPF on an envelope subdomain and requires an MX record there; here is the full set.
Proofpoint Essentials SPF and DKIM setup
Authorize the Proofpoint relay in SPF and turn on its console-generated DKIM key, per region.
Gorgias SPF and DKIM setup
Verify your domain in Gorgias: the gor and gor2 DKIM CNAMEs, the em return path, and the TXT variant.
Bird SPF and DKIM setup
DKIM TXT plus a send. return-path CNAME; Bird never asks for an apex SPF include.
Squarespace SPF and DKIM setup
One DKIM CNAME, a generated _dmarc TXT, no SPF record, and automatic when Squarespace owns the domain.
Sender SPF and DKIM setup
The sendersrv.com include, the sender._domainkey CNAME, and the ?all and bare p=none defaults to fix.
BigCommerce SPF and DKIM setup
One SPF include, no DKIM record to add, and why that makes SPF the only thing carrying your order mail.
Mailtrap SPF and DKIM setup
Four CNAMEs, two rwmt DKIM selectors, and no SPF include to copy: Mailtrap Email Sending verified.
SMTP.com SPF and DKIM setup
The _spf.smtp.com include, the smtpkey CNAME, and why support has to switch DKIM signing on.
Emarsys SPF and DKIM setup
Sending subdomain, key5 and key6 DKIM CNAMEs, and the bounces CNAME that makes SPF align.
Yandex 360 SPF and DKIM setup
MX, redirect= SPF, and the mail._domainkey DKIM key for Yandex-hosted mailboxes, with the second-sender trap.
Kayako SPF and DKIM setup
Three CNAMEs, one SPF include, and a DKIM checkbox you must not tick until DNS is live.
Wix SPF and DKIM setup
Wix authenticates by CNAME, not TXT, and its fifth record wants your _dmarc name. Here is how to keep both.
Netcore Email API SPF and DKIM setup
Netcore (ex-Pepipost): SPF include, DKIM record, envelope CNAME, and the approval step after DNS.
Greenhouse SPF and DKIM setup
Why Greenhouse puts its records on a gh-mail subdomain, the MX it needs, and when to register with a ! prefix.
HappyFox SPF and DKIM setup
The spf.happyfox.com include, two DKIM CNAMEs, and the fallback that rewrites unverified channels.
DocuSign SPF and DKIM setup
Get envelope notifications off dse@docusign.net: claim, subdomain, two DKIM CNAMEs, SPF, MX.
Lever SPF and DKIM setup
No Lever DNS record exists: authenticate the Google or Microsoft mailbox Lever sends through.
Omnisend SPF and DKIM setup
Omnisend's generated SPF, DKIM, and DMARC TXT records, and why Verified needs all three found plus a sender address on that exact domain.
Moosend SPF and DKIM setup
The spfa.mailendo.com SPF include and ms._domainkey DKIM TXT, plus the rule that Moosend verifies SPF, DKIM, and DMARC in one pass.
SendPulse SPF and DKIM setup
The mxsspf.sendpulse.com include, the sign._domainkey DKIM TXT key, and why the From domain must match the activated Sending domain.
Benchmark Email SPF and DKIM setup
Two account-specific CNAMEs (SPF and DKIM), the DMARC record Benchmark requires, and the clients.bmsend.com rewrite you get without them.
Elastic Email SPF and DKIM setup
The _spf.elasticemail.com include, the api._domainkey DKIM TXT, the optional tracking CNAME, and the custom bounce domain that makes SPF align.
Braze SPF and DKIM setup
Braze sends through SendGrid, SparkPost, or Amazon SES on a dedicated subdomain. Which records you are handed for each, and why your apex only gets DMARC.
Salesforce Marketing Cloud SPF and DKIM setup
Marketing Cloud Engagement's Sender Authentication Package or Private Domain: delegate the subdomain or publish the zone file, then fix the hidden DMARC rua.
Atlassian SPF and DKIM setup
Send Jira and Confluence notifications from your domain: the Atlassian email domain, _spf.atlassian.net, two DKIM CNAMEs, the bounce CNAME, and DMARC.
Calendly SPF and DKIM setup
Calendly has no SPF include or DKIM key. Which of its three notification paths sends as your domain, and what that means for your reports.
Typeform SPF and DKIM setup
Authorize an Automation email domain in Admin settings: two pdk DKIM CNAMEs, the mailgun.org SPF include, and why form notifications stay on Typeform.
Substack SPF and DKIM setup
Substack never sends from your domain. Why there is no SPF include or DKIM selector to publish, and what the paid custom domain actually changes.
beehiiv SPF and DKIM setup
Send your beehiiv newsletter from your own domain: the ownership TXT and three CNAMEs, the DMARC record beehiiv requires, and the Verified vs In use trap.
Ghost SPF and DKIM setup
Ghost(Pro) custom sending domain on the Publisher plan, the Mailgun records a self-hosted newsletter publishes, the required DMARC record, and the six-week warm-up.
Mailmodo SPF and DKIM setup
The DKIM TXT, bounce CNAME, and DMARC TXT Mailmodo generates for each sender domain, why there is no SPF include, and the hostname suffix trap behind Refresh and Verify.
Dotdigital SPF and DKIM setup
Dotdigital puts a custom from address on a brand-new subdomain it controls via NS delegation, and the DMARC reports for it go to Dotdigital unless you ask support to add you.
Ortto SPF and DKIM setup
Ortto (formerly Autopilot) authenticates a custom domain with three per-account CNAMEs, treats SPF as optional, and quietly falls back to autopilotmail.com while a domain is pending.
SendLayer SPF and DKIM setup
Five records on the sl subdomain, all copied from the dashboard, plus the DMARC CNAME that is not your DMARC record and the strict-alignment trap.
Amazon WorkMail SPF and DKIM setup
The AWS mailbox product that sends through SES: ownership TXT, MX, AutoDiscover, three DKIM CNAMEs, the MAIL FROM that aligns SPF, and the 2027 shutdown.
iCloud Mail SPF and DKIM setup
Custom Email Domain on iCloud+: the include:icloud.com SPF, the sig1._domainkey DKIM CNAME with your domain inside the target, and the MX cutover.
Namecheap Private Email SPF and DKIM setup
Private Email mailboxes: the spf.privateemail.com include, the two MX records, and the DKIM TXT whose hostname depends on when you bought the subscription.
Keap SPF and DKIM setup
Keap's three app-named CNAMEs, the include:infusionmail.com SPF line, the DMARC record it offers to write, and how it rewrites a Gmail From address.
Ontraport SPF and DKIM setup
Ontraport's Entri-driven Custom Domains flow, the single ontraport._domainkey CNAME it publishes, the paid-only and From address rules, and what still sends as ontramail.
EmailOctopus SPF and DKIM setup
Publish the four CNAMEs and the DMARC TXT EmailOctopus generates, understand the eom. return path, and stop it rewriting your From address to eomail1.com.
Buttondown SPF and DKIM setup
Delegate a sending subdomain to Buttondown with two NS records or publish its manual Postmark records, free on every plan, and check what that does to your DMARC.
Sendy SPF and DKIM setup
Sendy sends through Amazon SES, so the DKIM CNAMEs and custom MAIL FROM are SES records, not Sendy records. What to verify, and how the brand From email decides DMARC.
WordPress SPF and DKIM setup
Default wp_mail sends from your web host with no DKIM and fails DMARC. How to route it through an SMTP or API mailer, and why Force From Email alone makes it worse.
Webflow SPF and DKIM setup
Webflow sends form notifications from no-reply-forms@webflow.com or no-reply@webforms.io, never your domain, so there is nothing to publish and DMARC is Webflow's job.
Hostinger Email SPF and DKIM setup
The fixed Hostinger Email record set (mx1/mx2, one SPF include, three hostingermail DKIM CNAMEs), one-click publish on Hostinger nameservers, and the Titan Email mix-up.
Okta SPF and DKIM setup
Okta's custom email address is SendGrid underneath: one verification TXT, a return-path CNAME, two DKIM CNAMEs, and a documented reason to use a dedicated subdomain.
Auth0 SPF and DKIM setup
Auth0's built-in sender is test-only and mails from no-reply@auth0user.net. Which provider to plug in, whose SPF and DKIM records you publish, and the From-address trap.
More in the Knowledge Base
Stop guessing. Start monitoring.
Free for one domain. Set up in five minutes. We parse the reports; you read plain-English summaries.