DMARC Setup Guides by Provider

Choose your email provider to get step-by-step instructions for SPF, DKIM, and DMARC. Each guide covers the DNS records to publish, where to enable signing, and how to validate the final setup before moving to enforcement.

Choose your provider

Google Workspace

SPF include: include:_spf.google.com

DKIM selectors: google

Microsoft 365

SPF include: include:spf.protection.outlook.com

DKIM selectors: selector1, selector2

Mailchimp

SPF include: include:servers.mcsv.net

DKIM selectors: k1

SendGrid (Twilio)

SPF include: include:sendgrid.net

DKIM selectors: s1, s2

Amazon SES

SPF include: include:amazonses.com

DKIM selectors: varies (three auto-generated CNAME records)

Mailgun

SPF include: include:mailgun.org

DKIM selectors: varies (provider-generated selector)

HubSpot

SPF include: include:mail.hubspot.com

DKIM selectors: varies (two CNAME records provided by HubSpot)

Zoho Mail

SPF include: include:zoho.com

DKIM selectors: varies (configured in Zoho Admin Console)

Postmark

SPF include: include:spf.mtasv.net

DKIM selectors: varies (DKIM provided as a TXT record by Postmark)

Cloudflare Email Routing

SPF include: include:_spf.mx.cloudflare.net

DKIM selectors: varies (depends on your upstream sending provider)

Before you publish DMARC

Inventory every service that sends mail for your domain before you tighten policy.
Make sure SPF and DKIM are aligned for each approved sender.
Start with p=none, review aggregate reports, then move to enforcement.
Keep one SPF record per domain and stay within the 10-lookup limit.

Need to validate records first? Use our SPF Checker, DKIM Checker, and DMARC Checker before you publish changes.