> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sellagent.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# How to Set Up MX, SPF, DKIM & DMARC

> Configure essential DNS records to ensure email deliverability, prevent spam, and authenticate your domain for outbound campaigns.

Proper DNS configuration is essential for email deliverability, spam prevention, and receiving campaign replies. This guide walks you through setting up all four key DNS record types.

## Why DNS Records Matter

| Record    | Purpose                                                |
| --------- | ------------------------------------------------------ |
| **MX**    | Routes incoming mail to your inbox                     |
| **SPF**   | Authorizes sending servers on your behalf              |
| **DKIM**  | Adds a digital signature for authenticity verification |
| **DMARC** | Provides authentication policy and handles failed auth |

<Note>
  You need **all four records** configured for optimal email deliverability and security. If you purchased a Done-For-You or Pre-warmed domain, these may already be configured automatically.
</Note>

***

## MX Record

MX (Mail Exchange) records direct incoming emails to the correct mail servers. Without them, you won't receive any incoming emails or campaign replies.

**How to set up:**

1. Log into your domain registrar
2. Navigate to DNS settings
3. Add your email provider's MX records

Setup guides by provider:

* [Google Workspace](https://support.google.com/a/answer/140034)
* [Microsoft 365](https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider)
* [GoDaddy](https://www.godaddy.com/help/add-an-mx-record-19234)
* [Namecheap](https://www.namecheap.com/support/knowledgebase/article.aspx/322/2237/how-to-set-up-mx-records-required-for-mail)
* [Hostinger](https://support.hostinger.com/en/articles/1583227-how-to-set-up-mx-records)

***

## SPF Record

SPF (Sender Policy Framework) specifies which mail servers are authorized to send email on behalf of your domain. It reduces spam, improves deliverability, and verifies your domain's legitimacy.

**How to set up:**

1. Get the SPF record value from your email provider
2. Add it as a **TXT record** in your domain's DNS settings

**Example SPF record (Google Workspace):**

```
v=spf1 include:_spf.google.com ~all
```

Setup guides by provider:

* [Google Workspace](https://support.google.com/a/answer/33786)
* [Microsoft 365](https://learn.microsoft.com/en-us/microsoft-365/admin/get-help-with-domains/create-dns-records-at-any-dns-hosting-provider)
* [GoDaddy](https://www.godaddy.com/help/add-a-txt-record-19232)
* [Namecheap](https://www.namecheap.com/support/knowledgebase/article.aspx/317/2237/how-do-i-add-txtspfdkimdmarc-records)
* [Hostinger](https://support.hostinger.com/en/articles/1696789-how-to-add-spf-record)

<Warning>
  You should only have **one SPF record** per domain. Multiple SPF records will cause failures.
</Warning>

***

## DKIM Record

DKIM (DomainKeys Identified Mail) adds a digital signature to your outgoing emails. It verifies authenticity, prevents message tampering, and improves deliverability.

**How to set up:**

1. Generate a DKIM key from your email provider's admin panel
2. Add it as a **TXT record** in your domain's DNS settings

Setup guides by provider:

* [Google Workspace](https://support.google.com/a/answer/174124)
* [Microsoft 365](https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-dkim-configure)
* [GoDaddy](https://www.godaddy.com/help/add-a-txt-record-19232)
* [Namecheap](https://www.namecheap.com/support/knowledgebase/article.aspx/317/2237/how-do-i-add-txtspfdkimdmarc-records)
* [Hostinger](https://support.hostinger.com/en/articles/4826444-how-to-add-dkim-record)

***

## DMARC Record

DMARC (Domain-based Message Authentication, Reporting & Conformance) authenticates your emails using SPF and DKIM, and instructs receiving servers on how to handle messages that fail authentication.

**How to set up:**

Add a TXT record at `_dmarc.yourdomain.com` using one of these options:

**Option 1 — Follow your email provider's guide:**

* [Google Workspace](https://support.google.com/a/answer/2466563)
* [Microsoft 365](https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-dmarc-configure)
* [GoDaddy](https://www.godaddy.com/help/add-a-txt-record-19232)
* [Namecheap](https://www.namecheap.com/support/knowledgebase/article.aspx/317/2237/how-do-i-add-txtspfdkimdmarc-records)
* [Hostinger](https://support.hostinger.com/en/articles/4696657-how-to-add-dmarc-record)

**Option 2 — Use a third-party DMARC provider:**

* [Postmark DMARC Setup](https://dmarc.postmarkapp.com/)

**Example DMARC record:**

```
v=DMARC1; p=none; rua=mailto:your-email@yourdomain.com
```

<Warning>
  Always set up **SPF and DKIM first**, then wait at least **48 hours** before enabling DMARC. Enabling DMARC before the others are verified can cause email delivery failures.
</Warning>

***

## Testing Your DNS Records

Once your records are configured, verify they are working correctly using one of these methods:

<Tabs>
  <Tab title="Third-Party Tools">
    Use these free tools to test your DNS records:

    * [MXToolbox](https://mxtoolbox.com/) — Test MX, SPF, DKIM, and DMARC
    * [EasyDMARC](https://easydmarc.com/tools/domain-scanner) — Full domain scanner
    * [DMARCian](https://dmarcian.com/dmarc-inspector/) — DMARC-specific inspector
  </Tab>
</Tabs>

<Note>
  DNS changes can take **up to 48 hours** to fully propagate. If records aren't showing up immediately, wait and test again.
</Note>

***

## Troubleshooting

<AccordionGroup>
  <Accordion title="MX Records Not Working">
    * Verify the MX server addresses match exactly what your provider requires
    * Allow 24–48 hours for DNS propagation before troubleshooting further
  </Accordion>

  <Accordion title="SPF Record Failures">
    * Ensure your SPF record includes your email provider's sending servers
    * Check for any syntax errors in the record value
    * Make sure you only have **one SPF TXT record** — multiple SPF records will cause failures
  </Accordion>

  <Accordion title="DKIM Not Validating">
    * Confirm the DKIM record was added correctly in your DNS settings
    * Verify the selector name matches what your provider expects
    * Check for typos or extra spaces in the DKIM key value
  </Accordion>

  <Accordion title="DMARC Issues">
    * Ensure SPF and DKIM are both set up and validated **before** enabling DMARC
    * Confirm the DMARC record was added at `_dmarc.yourdomain.com`
    * Allow 24–48 hours for DNS propagation after adding the record
  </Accordion>
</AccordionGroup>