Sending provider

HubSpot SPF, DKIM and DMARC setup

HubSpot authenticates a sending domain with two DKIM CNAME records, an SPF include for your account (HubSpot's example is include:123456.spf03.hubspotemail.net) and a DMARC TXT record. Copy each Host and Required data value from Settings > Content > Domains & URLs > Email Sending > Connect sending domain. The domain shows Authenticated when all three pass.

HubSpot

Records at a glance

SPF include

include:<HubID>.spf0X.hubspotemail.net

DKIM

Two CNAMEs, values from the connect wizard

DMARC
v=DMARC1; p=none;

Check HubSpot on your domain

Enter the domain you send from: the check looks for the HubSpot SPF include, its DKIM key and your DMARC record, and says what to fix.

Lookups go from your browser to Cloudflare's public DNS resolver.

DNS records

The HubSpot records

Values in angle brackets are specific to your account; copy them from the provider. Hosts are relative to your domain, as most DNS panels expect them.

Good to know

Step by step

Connect your sending domain in HubSpot

  1. Open Email Sendingsource (opens the vendor's page in a new tab)

    Click the settings icon, then Content > Domains & URLs in the left sidebar, and the Email Sending tab

  2. Connect the domainsource (opens the vendor's page in a new tab)

    Click Connect sending domain, enter an address you send marketing email from, click Next and verify the domain

  3. Pick the setupsource (opens the vendor's page in a new tab)

    Click Sign in with your DNS provider if HubSpot offers it, or No, I'll set it up manually

  4. Copy every recordsource (opens the vendor's page in a new tab)

    Add the Host and Required data of each record at your DNS host: two DKIM CNAMEs, the SPF TXT and the DMARC TXT

  5. Check the statussource (opens the vendor's page in a new tab)

    Wait at least 20 minutes (up to 48 hours) and check the Email Sending tab; Continue setup shows which record still fails

Where the records go

Field by field for the DNS panel your domain uses:

DMARC

DMARC with HubSpot

DMARCA safe first record

TXT at _dmarc

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Replace the address with a mailbox you read; move to p=quarantine when the reports show every sender passing.

Troubleshooting

Common HubSpot errors and fixes

For cold email

Mailboxes that come with the DNS records done

If the domain is for cold outreach, keep HubSpot on your main domain and send from separate domains. Outreach2day buys the domains, publishes SPF, DKIM and DMARC, creates the mailboxes and starts warm-up, then sends your campaigns from its own sequencer or exports the mailboxes to Instantly or Smartlead.

Create mailboxesBook a call
  • SPF, DKIM and DMARC set for youOn every domain, checked after setup and kept in place
  • $2.50 a mailbox a month12-mailbox minimum; warm-up and the sending engine included
  • 1,000+ mailboxesA volume price per mailbox, quoted on a call

Questions

What is the HubSpot SPF record?

An include for your account, like include:123456.spf03.hubspotemail.net in HubSpot's example. Copy yours from the connect wizard and merge it into your existing SPF record.

What does Partially authenticated mean in HubSpot?

DKIM is verified but SPF or DMARC is missing. Click Continue setup on the Email Sending tab to see the records that still fail.

Where do I find the HubSpot DKIM records?

In Settings > Content > Domains & URLs > Email Sending > Connect sending domain. The wizard shows two CNAMEs with Host and Required data values for your account.

Can I send cold email from HubSpot?

HubSpot marketing email is built for contacts who opted in. Cold outreach runs from separate domains and mailboxes, so the domain HubSpot sends from keeps its reputation.

Sources

HubSpot documentation, checked . Menus and values change; if a step differs, HubSpot's own page is the reference.

Deliverability call

Talk to our deliverability team

Book a call with the people who run our mailbox infrastructure. We look at your current setup and tell you what to change. Running 1,000+ mailboxes? We also quote a volume price below every vendor list price in our comparisons, warm-up and sending included.

  • Review your domains, DNS records and current inbox placement
  • Size the setup: domains, mailboxes per domain and daily volume per mailbox
  • Plan warm-up and the move from your current provider or sequencer
  • 1,000+ mailboxes: a volume price per mailbox for your setup

Free call

See open times in your time zone and book on this page.

Or open the booking page