Adding & verifying DNS records (SPF, DKIM, DMARC, MX)

When you send email campaigns or transactional messages through Sendigram, major email providers (like Gmail, Yahoo, and Outlook) need to verify that our servers have your explicit permission to deliver mail on your behalf.

Setting up your Domain Name System (DNS) records correctly ensures your messages bypass the spam folder and land directly in your subscribers' inboxes.

Before You Start: Locate Your DNS Provider

To add these records, you need to log into the account where your domain is registered or managed (e.g., GoDaddy, Cloudflare, Namecheap, Google Domains, or Route 53). Look for the DNS Zone Editor, DNS Manager, or Advanced DNS section.

Important: Some DNS providers automatically append your domain name to the "Host" or "Name" field. For example, if the instructions say to enter _dmarc, your provider might automatically turn it into _dmarc.yourdomain.com. If a Host field requires your root domain, entering @ usually works.

1. SPF (Sender Policy Framework)

SPF is a text record that specifies exactly which IP addresses and servers are authorized to send email from your domain.

  • Type: TXT
  • Host/Name: Copy it from the DNS records window
  • Value/Text: Copy it from the DNS records window

2. DKIM (DomainKeys Identified Mail)

DKIM acts as a digital signature for your emails. It proves to receiving servers that the email was actually sent by the domain owner and wasn't altered in transit. Sendigram asks you to add three DKIM records.

  • Type: CNAME (three records: DKIM 1, DKIM 2 and DKIM 3)
  • Host/Name: copy it from the DNS records window (each record has its own name)
  • Value/Text: (copy it from the DNS records window; each record has its own value)

3. DMARC (Domain-based Message Authentication, Reporting, and Conformance)

DMARC uses your SPF and DKIM records to give receiving mail servers instructions on what to do if an email fails authentication. If you are new to DMARC, start with a "none" (monitoring only) policy. This protects your deliverability while you gather data.

  • Type: TXT
  • Host/Name: _dmarc
  • Value/Text: v=DMARC1; p=none;

Pro Tip: You can add an email address to receive daily authentication reports by appending the rua tag: v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com;

4. MX Records (Mail Exchanger)

MX records direct incoming email to a specific mail server.

Sendigram asks you to add one MX record, which is used to process bounce messages. Add it exactly as shown and do not change your existing MX records.

  • Type: MX
  • Host/Name: Copy it from the DNS records window
  • Value/Points to: Copy it from the DNS records window (it starts with the priority)

Summary Checklist

Record Type Host / Name Value / Text Purpose
SPF TXT From the DNS records window From the DNS records window Authorizes Sendigram servers
DKIM CNAME (3 records) From the DNS records window From the DNS records window (unique for each record) Signs your emails cryptographically
DMARC TXT _dmarc v=DMARC1; p=none; Instructs servers how to handle failures
MX MX From the DNS records window From the DNS records window Handles bounce messages

Verifying Your Settings

DNS changes do not always happen instantly. While many updates take effect within a few minutes, it can take up to 24–48 hours to propagate globally across the internet.

Once you have saved the records in your domain registrar, head back to your Sender settings page, open your domain (Actions → View) and click Check DNS records. A green checkmark will appear next to each successfully validated record.

Still have questions?