Authenticating Domains with SPF & DKIM

Set Mailjet as an authorized sender by customizing your SPF & DKIM DNS records for your sending domains.

Summary

SPF & DKIM Authentication

SPF & DKIM are authentication systems that tell Internet Service Providers (ISPs), like Gmail and Yahoo, that incoming mail has been sent from an authorized system, and that it is not spam or email spoofing.

To set Mailjet as an authorized sender, you will need to setup your SPF & DKIM authentication for each of your sending domains. Once setup, SPF & DKIM will also help with your deliverability – meaning your emails have a better chance of delivered to the recipient’s inbox and not their spam folder.

As you need to configure your domain for SPF & DKIM authentication, it can only be done on custom domains or domains that you own. It also means SPF & DKIM authentication cannot be done for free webmail accounts like Google, Yahoo, and Hotmail.

Setup Overview

To setup SPF & DKIM authentication for your domain, you will need access to your DNS records in your domain hosting account (GoDaddy, 1&1, HostGator, OVH, ….). If you cannot find, or do not have access to your DNS records, please contact your domain hosting provider for assistance.

In summary, to authenticate your domain, you will need to copy the SPF & DKIM values from your Mailjet account to setup SPF & DKIM DNS records in your hosting account.

Here is an example SPF record setup:

SPF & DKIM Authentication

And an example DKIM record setup:

SPF & DKIM Authentication

[top]

SPF & DKIM Values

From your Domain Name Configuration page, you will find all your sending domains and their SPF & DKIM statuses. (Every time you add a sending email address or domain, the domain will be added to the Domain Name Configuration page.)

SPF & DKIM Authentication

For the domain you want to authenticate, click on ‘Manage’ to view the SPF & DKIM values.

SPF & DKIM Authentication

Please keep your SPF & DKIM window open as you will need to copy information into your DNS records.

SPF & DKIM Authentication

DNS Records

Open a new window and log into your hosting account or where your DNS records can be accessed.

Go to the section where you can create and view your DNS records. (If you are unsure where to find your DNS records, please contact your hosting provider for assistance.)

For this example, we will be using a GoDaddy account. (For instructions on setting up DNS records for other common providers, please go to the Helpful Links section.)

SPF & DKIM Authentication

Please keep in mind that your DNS records may have different labels and displays. But essentially every DNS has a name, value (data) and record type.

To setup your domain authentication, you will need a TXT DNS record for your SPF and one for your DKIM.

[top]

DNS Record for SPF

There are two main points to know about the SPF records:

      1) SPF record is a TXT record; not be confused with the SPF type. (Although the SPF type could be used, it is not recommended in the industry.)
      2) There is only one SPF record per domain. (If you have more than one SPF DNS record, ISPs will not know which one to use which may cause authentication issues.)

Go to your domain hosting account and view your current DNS records. If you see no SPF record, you will need to create a new record; otherwise you will edit the existing SPF record:

  • Create a new SPF Record
    • Add a new DNS record of type TXT
    • Copy the host name from your Mailjet page to the Host Field

      SPF & DKIM Authentication

      In some cases, the domain provider may already populate the host name with your domain name. Please just double check that host name ends with a period.

      To authenticate a subdomain, simply add the subdomain followed by a period to the start of the Host field.

      SPF & DKIM Authentication

      Tip: Did you know that @ can be used in the Host Field as it represents your domain name? Instead of copying your values over, just use: @

      SPF & DKIM Authentication

      The @ can be used for authenticating sub-domains as well:

      SPF & DKIM Authentication

    • Copy the SPF value from your Mailjet page to the TXT Value Field. (Some providers may require double quotes around the value field. It is best to contact your provider for assistance if you are unsure.)

      SPF & DKIM Authentication

    • Save your record
  • Edit an existing SPF Record

    In the case you already have an SPF record, simply add the “include” part of your SPF value to the SPF’s TXT value field, and save your changes.

    In this example, copy include:spf.mailjet.com to the existing SPF record...

    SPF & DKIM Authentication

    And the new TXT value will be:

    SPF & DKIM Authentication

Once you have saved your SPF records, the last step is to check the DNS status from your Mailjet page.

DNS Record for DKIM

To setup DKIM authentication, you will be creating a new DKIM record. (Unlike SPF records, there are no issues with having multiple DKIM DNS records in your domain.)

From your domain hosting account, create a new DNS record of type TXT.

In the Host Field, add the value: mailjet._domainkey.yourdomain.com.
(and replace yourdomain with the domain name you are authenticating.)

SPF & DKIM Authentication

The second step is to copy the very long DKIM value into the TXT Value Field.

SPF & DKIM Authentication

Please note that some domain providers may require double quotes " " around the entire TXT Value. (If you are unsure whether to add the quotes, please contact your provider’s support team for clarification).

Once you have saved your new DKIM record, the last step is to check the DNS status from your Mailjet page.

[top]

Checking your DNS Status

Once you have completed and saved your SPF & DKIM records, jump back to your Mailjet page and click the ‘Force Refresh’ button.

SPF & DKIM Authentication

Once your domain has been authenticated, you will see the green ‘looks good’ message.

SPF & DKIM Authentication

Please note: it may take up to 24 hours for your DNS changes to reach the Mailjet system.

If your domain is still not authenticated after 24 hours, please check our troubleshooting checklist below or contact your domain hosting provider for help.

[top]

Troubleshooting Checklists

Please review the summary checklists for your DNS records:

SPF:

  • SPF is a TXT record
  • Only one SPF record for your domain
  • Host Name ends with a period

    SPF & DKIM Authentication

  • Depending on your domain hoster, double quotes may be needed around the TXT value

    SPF & DKIM Authentication

DKIM:

  • DKIM is a TXT record
  • Multiple DKIM records can exist for your domain
  • Host Name ends with a period

    SPF & DKIM Authentication

  • Some providers may require double quotes around the TXT value

    SPF & DKIM Authentication

If your authentication is not working after 24 hours, please contact your domain host provider for assistance.

Step-by-Step Guides on creating DNS records for:

Links on how to edit DNS records for:

[top]

Try Mailjet now ?
Create an account - no engagement, no hidden fees