Skip to main content
Proper DNS configuration is essential for email deliverability, spam prevention, and receiving campaign replies. This guide walks you through setting up all four key DNS record types.

Why DNS Records Matter

RecordPurpose
MXRoutes incoming mail to your inbox
SPFAuthorizes sending servers on your behalf
DKIMAdds a digital signature for authenticity verification
DMARCProvides authentication policy and handles failed auth
You need all four records configured for optimal email deliverability and security. If you purchased a Done-For-You or Pre-warmed domain, these may already be configured automatically.

MX Record

MX (Mail Exchange) records direct incoming emails to the correct mail servers. Without them, you won’t receive any incoming emails or campaign replies. How to set up:
  1. Log into your domain registrar
  2. Navigate to DNS settings
  3. Add your email provider’s MX records
Setup guides by provider:

SPF Record

SPF (Sender Policy Framework) specifies which mail servers are authorized to send email on behalf of your domain. It reduces spam, improves deliverability, and verifies your domain’s legitimacy. How to set up:
  1. Get the SPF record value from your email provider
  2. Add it as a TXT record in your domain’s DNS settings
Example SPF record (Google Workspace):
v=spf1 include:_spf.google.com ~all
Setup guides by provider:
You should only have one SPF record per domain. Multiple SPF records will cause failures.

DKIM Record

DKIM (DomainKeys Identified Mail) adds a digital signature to your outgoing emails. It verifies authenticity, prevents message tampering, and improves deliverability. How to set up:
  1. Generate a DKIM key from your email provider’s admin panel
  2. Add it as a TXT record in your domain’s DNS settings
Setup guides by provider:

DMARC Record

DMARC (Domain-based Message Authentication, Reporting & Conformance) authenticates your emails using SPF and DKIM, and instructs receiving servers on how to handle messages that fail authentication. How to set up: Add a TXT record at _dmarc.yourdomain.com using one of these options: Option 1 — Follow your email provider’s guide: Option 2 — Use a third-party DMARC provider: Example DMARC record:
v=DMARC1; p=none; rua=mailto:your-email@yourdomain.com
Always set up SPF and DKIM first, then wait at least 48 hours before enabling DMARC. Enabling DMARC before the others are verified can cause email delivery failures.

Testing Your DNS Records

Once your records are configured, verify they are working correctly using one of these methods:
Use these free tools to test your DNS records:
DNS changes can take up to 48 hours to fully propagate. If records aren’t showing up immediately, wait and test again.

Troubleshooting

  • Verify the MX server addresses match exactly what your provider requires
  • Allow 24–48 hours for DNS propagation before troubleshooting further
  • Ensure your SPF record includes your email provider’s sending servers
  • Check for any syntax errors in the record value
  • Make sure you only have one SPF TXT record — multiple SPF records will cause failures
  • Confirm the DKIM record was added correctly in your DNS settings
  • Verify the selector name matches what your provider expects
  • Check for typos or extra spaces in the DKIM key value
  • Ensure SPF and DKIM are both set up and validated before enabling DMARC
  • Confirm the DMARC record was added at _dmarc.yourdomain.com
  • Allow 24–48 hours for DNS propagation after adding the record