SendGrid: SPF, DKIM and DMARC setup
Add these records at your DNS host, then check your domain below. The check counts SPF lookups and shows any SendGrid DKIM key it finds.
The rest of the domain
Watch this domain for changes with Sender Guard. Free for 3 domains.
Records for SendGrid
| Type | Host | Value |
|---|---|---|
| CNAME | s1._domainkey | shown in SendGrid → Settings → Sender Authentication |
| CNAME | s2._domainkey | shown in SendGrid → Settings → Sender Authentication |
| CNAME | em1234 (your number) | shown in SendGrid → Settings → Sender Authentication |
With automated security on (the default), SendGrid's CNAMEs cover SPF and DKIM, so you do not add SendGrid to your own SPF record. With it off, add include:sendgrid.net instead.
DMARC. Start with v=DMARC1; p=none; rua=mailto:you@yourdomain.com at _dmarc, read the reports for a few weeks, then move to p=quarantine. Gmail and Yahoo require a DMARC record from bulk senders.
One SPF record only. If you already have one, add the include to it rather than publishing a second record.
Other checks
SPF checker DMARC checker DKIM checker MX lookup Full domain report