Setup guide
Freshdesk: SPF, DKIM and DMARC
When Freshdesk sends through its own mail server, it verifies your domain with four CNAME records generated under Configure DKIM. The SPF include is optional once DKIM is in place.
By Ahmet Karaca · Updated · Checked against Freshdesk documentation on
DNS records to add
<host from Freshdesk, like fwdkim1><value from Freshdesk, like spfmx1.domainkey.freshemail.io>Get this value from your provider's dashboard.One of the four CNAME records shown under Configure DKIM; publish all four
@v=spf1 include:email.freshdesk.com ~allSPF (not required once DKIM is set up)
Steps
- Log in as an admin and open Admin → Channels → Email → Advanced Settings → Configure DKIM.
- Copy the four CNAME records Freshdesk generated for your domain and publish them at your DNS host.
- Back in Configure DKIM, expand the domain and click Verify. A green check mark means the records are published correctly.
- If you also want SPF, add include:email.freshdesk.com to your existing SPF record.
Common mistakes
- GoDaddy appends your domain to the host, so entering fwdkim1.example.com creates fwdkim1.example.com.example.com and Freshdesk can't verify it. Enter only fwdkim1.
- A space before or after any character of a CNAME record, or a missing character, makes Freshdesk's DKIM verification fail.
- When one domain is added to several Freshdesk accounts or Freshworks products, the DKIM values can overlap. Publish one entry that contains all the values instead of duplicates.
- DKIM setup in Freshdesk doesn't apply when you send through a custom mailbox. Freshdesk still recommends configuring DKIM for that mail server in your own DNS.
Good to know
- DKIM is set up once per email domain: support@ and billing@ on one domain share it, while an address on a second domain needs its own records.
- If email.freshdesk.com costs too many SPF lookups, include only your data center's record instead: fdspfus (US), fdspfeuc (EU), fdspfind (IND) or fdspfaus (AU), each under freshemail.io.
Frequently asked questions
Do I need an SPF record if DKIM is set up in Freshdesk?
No. Freshdesk says SPF configuration isn't required once DKIM is set up.
How will I know Freshdesk verified my domain?
The account admin gets one email per domain when verification completes. Propagation can take from minutes to several hours, and up to 48 hours in some cases.
What does the 'Domain verified in other account' error mean in Freshdesk?
Remove the records you added for the account, leave the page and add the values again. If the error persists, send a screenshot to support@freshdesk.com.
How do I add another domain to Freshdesk DKIM?
Adding an email address creates its domain under Configure DKIM automatically. For other new records or domains, contact support@freshdesk.com with your Freshdesk URL and plan.
Adding records at your DNS host
Check your setup
After publishing, use the check below or run the domain health check. DNS changes usually appear within minutes, but can take up to a few hours. Official reference: Freshdesk documentation.
Check your Freshdesk setup
Or open the SPF checker, DKIM checker or DMARC checker directly.