SPF, DKIM and DMARC setup by provider
Every service that sends email as your domain has its own SPF include, its own DKIM records and its own way to turn DKIM on. Pick the service for the exact records from its docs and a check of your domain, then the DNS host for where they go.
Three records, one domain
- SPF
@One TXT record per domain that lists every service allowed to send as it; at most 10 DNS lookups - DKIM
<selector>._domainkeyA public key per service (TXT, or a CNAME to a key the service hosts) that checks the signature on each message - DMARC
_dmarcOne TXT record that tells receivers what to do when SPF and DKIM fail to align with the From domain, and where to send reports
Sending providers
Records for the service you send with
The SPF include, DKIM records and DMARC advice from each provider's own docs, a check of your domain pre-set for that provider, and the errors its docs list.
- Microsoft 365include:spf.protection.outlook.com, DKIM CNAMEs at selector1 and selector2, DKIM switched on in DefenderRecordsCheckerDKIM steps
- Google Workspaceinclude:_spf.google.com, DKIM generated in the Admin console, DMARC at _dmarcGuide
- Salesforceinclude:_spf.salesforce.com, two DKIM CNAMEs to custdkim.salesforce.com, key activated in SetupRecordsCheckerDKIM steps
- MailchimpTwo DKIM CNAMEs and a DMARC TXT record; no SPF include in Mailchimp's requirementsRecordsCheckerDKIM steps
- SendGridThree CNAMEs (em<0000>, s1 and s2._domainkey); SPF sits on the return-path subdomainRecordsCheckerDKIM steps
- Amazon SESThree Easy DKIM CNAMEs; include:amazonses.com only on a custom MAIL FROM subdomainRecordsCheckerDKIM steps
- Mailguninclude:mailgun.org on the sending domain, DKIM TXT or pdk1/pdk2 CNAMEs, tracking CNAME and MXRecordsCheckerDKIM steps
- HubSpotPer-account include:<HubID>.spf0X.hubspotemail.net, two DKIM CNAMEs, DMARC; status AuthenticatedRecordsCheckerDKIM steps
- Zoho Mailinclude:zohomail.com at the root, DKIM TXT at a selector you choose, DKIM verified and enabledRecordsCheckerDKIM steps
DNS hosts
Where the records go
What to type in each field of your DNS panel, the TXT and CNAME steps, and the rules each host applies to names, quotes and proxies.
- GoDaddyDomain Portfolio > DNS > Add New Record; Name without the domain, one SPF record per domainField valuesTXT and CNAME steps
- CloudflareDNS > Records > Add record; DKIM CNAMEs DNS only, DMARC Management for reportsField valuesTXT and CNAME steps
- NamecheapDomain List > Manage > Advanced DNS; TXT Records with Host @, <selector>._domainkey and _dmarcField valuesTXT and CNAME steps
- SquarespaceDNS > DNS Settings > Custom Records; one SPF and one DMARC record, Name without the domainField valuesTXT and CNAME steps
For cold email
Mailboxes that come with the DNS records done
Outreach2day buys the domains, publishes SPF, DKIM and DMARC, creates the mailboxes and starts warm-up, then sends your campaigns from its own sequencer or exports the mailboxes to Instantly or Smartlead.
- SPF, DKIM and DMARC set for youOn every domain, checked after setup and kept in place
- $2.50 a mailbox a month12-mailbox minimum; warm-up and the sending engine included
- 1,000+ mailboxesA volume price per mailbox, quoted on a call
Deliverability call
Talk to our deliverability team
Book a call with the people who run our mailbox infrastructure. We look at your current setup and tell you what to change. Running 1,000+ mailboxes? We also quote a volume price below every vendor list price in our comparisons, warm-up and sending included.
- Review your domains, DNS records and current inbox placement
- Size the setup: domains, mailboxes per domain and daily volume per mailbox
- Plan warm-up and the move from your current provider or sequencer
- 1,000+ mailboxes: a volume price per mailbox for your setup
Free call
See open times in your time zone and book on this page.
Or open the booking pageLoading available times…
Open the booking page instead