DNS Records Explained (SPF, DKIM, DMARC)

Learn what SPF, DKIM, and DMARC records are and why they're essential for email deliverability.

What Are DNS Records?

DNS records are like a phone book for the internet. They tell other servers important information about your domain.

SPF (Sender Policy Framework)

What It Does

SPF tells other email servers which servers are allowed to send emails from your domain.

Why You Need It

• ✅ Prevents spammers from pretending to be you
• ✅ Improves email deliverability
• ✅ Reduces spam complaints

How to Set It Up

1. Open Email Domains and open your domain's DNS Setup dialog
2. Copy the SPF value shown there
3. Add it at your DNS host as a TXT record with host @ (or your domain)
4. Make sure the domain ends up with only one SPF record

DKIM (DomainKeys Identified Mail)

What It Does

DKIM adds a digital signature to your emails to prove they're really from you.

Why You Need It

• ✅ Verifies email authenticity
• ✅ Prevents email tampering
• ✅ Boosts sender reputation

How to Set It Up

1. Open Email Domains and open your domain's DNS Setup dialog
2. Copy the DKIM record, with its selector, exactly as shown
3. Add it as a TXT record in your DNS

Amazon SES verification records

Outgoing mail is delivered through Amazon SES, and each sending domain is verified with Amazon. The DNS Setup dialog lists the Amazon SES verification records for your domain once they have been generated. Add them along with the others, otherwise your domain cannot be verified for sending and DKIM signing.

DMARC (Domain-based Message Authentication)

What It Does

DMARC tells other servers what to do if an email fails SPF or DKIM checks.

Why You Need It

• ✅ Protects your brand from phishing
• ✅ Gives you reports on email authentication
• ✅ Required by many email providers

How to Set It Up

1. Copy the DMARC value from your domain's DNS Setup dialog
2. Add it at your DNS host as a TXT record with host _dmarc

Quick Setup Checklist

How to Test

1. Use the refresh icon (circular arrows) on the domain's row on the domain to check your records against the ones we expect
2. Send a test email to yourself at Gmail or Outlook
3. Check if it arrives in inbox (not spam)
4. Use online tools like MXToolbox to verify records

Common Issues

SPF Record Not Found

• Double-check the record is added correctly
• Allow time for the DNS change to be seen everywhere (up to 48 hours)
• Make sure there's only ONE SPF record

DKIM Verification Failed

• Verify the record matches the DNS Setup dialog exactly
• Check for extra spaces, line breaks or quote characters added by your DNS host
• Ensure the selector is correct

Need Help?

DNS can be confusing! If you need help setting up these records, contact support through the live chat in the control panel. Support is available during business hours.