Amazon SES: SPF, DKIM and DMARC setup
Add these records at your DNS host, then check your domain below. The check counts SPF lookups and shows any Amazon SES DKIM key it finds.
The rest of the domain
Watch this domain for changes with Sender Guard. Free for 3 domains.
Records for Amazon SES
| Type | Host | Value |
|---|---|---|
| CNAME | <token>._domainkey (three of them) | <token>.dkim.amazonses.com |
| TXT | your custom MAIL FROM subdomain | v=spf1 include:amazonses.com ~all |
Easy DKIM gives you three CNAME tokens in the SES console. SPF only aligns for DMARC if you set a custom MAIL FROM domain and publish the SPF record on it.
DMARC. Start with v=DMARC1; p=none; rua=mailto:you@yourdomain.com at _dmarc, read the reports for a few weeks, then move to p=quarantine. Gmail and Yahoo require a DMARC record from bulk senders.
One SPF record only. If you already have one, add the include to it rather than publishing a second record.
Other checks
SPF checker DMARC checker DKIM checker MX lookup Full domain report