SPF and DKIM by provider

Find the platform that sends your mail and copy the records it needs.

Last updated 20 Sep 2026

Sending through more than one of these? Combining SPF includes for several senders keeps the record under ten lookups.

Where your mailboxes live

The platform your people send from. Usually the first include in the record and the one that signs most of your mail.

Google Workspace mail for your users, plus anything relayed through its SMTP relay Microsoft 365 mail from Exchange Online mailboxes and anything else sending through your tenant GoDaddy mail from its own email products, and hosts the DNS zone that other platforms' records land in Fastmail mail for your users on your own domain Zoho Mail mail for your users, hosted on Zoho's servers

Mail your application sends

APIs and SMTP relays for receipts, resets and notifications. Signing with your own domain is the setting to find.

SendGrid transactional and marketing mail through its API and SMTP relay Postmark transactional email over its API or SMTP Amazon SES everything from application mail to bulk campaigns Mailgun application mail over its API or SMTP Mailjet campaigns and transactional mail Mailchimp Transactional application and transactional mail through the Mandrill API or SMTP

Campaigns and newsletters

Bulk senders with a return path of their own, so alignment rests on DKIM. Turn it on before the first send.

Mailchimp campaigns and automations from your audience HubSpot marketing email, sequences and workflow notifications Klaviyo ecommerce campaigns and flows Brevo campaigns, automations and transactional mail Campaign Monitor campaigns and automated email to your subscriber lists Constant Contact campaigns and automated email from your contact lists

Support, sales and billing tools that send as you

Each one mails your customers from your address. These are the senders that surprise you in the reports.

Zendesk ticket notifications and agent replies from your support address Salesforce workflow, case and list email from Sales Cloud and Service Cloud Intercom product messages, campaigns and inbox replies Stripe invoices, receipts and failed payment notices to your customers

Where a provider generates account-specific values, these pages say so rather than printing a guess. A wrong SPF include authorizes infrastructure you do not use, which is worse than having no page at all.

Elsewhere on the site

Bounce and error codes The literal string from your log, and what to change. Guides Setup, alignment, aggregate reports and the ten-lookup limit.

Or check a domain right now with the free DMARC, SPF and DKIM lookups.

Hear about a failing sender the day it fails

The records get a sender onto your domain. The reports say which senders still pass once real mail moves. We mail you that every Monday. On a paid plan, when a sender stops passing, we email you the same day. Your first domain is free.

Get the weekly digest

Free for your first domain · No card · Per-source totals kept for life