Patchkit

Setup guide

SendGrid: SPF, DKIM and DMARC

With automated security on (the default), SendGrid gives you three CNAME records that cover both SPF and DKIM.

DNS records to add

CNAMEHost<em1234>
<u1234.wl.sendgrid.net from SendGrid>Get this value from your provider's dashboard.

Return-path subdomain that makes SPF align

CNAMEHosts1._domainkey
<s1 target from SendGrid>Get this value from your provider's dashboard.

DKIM key 1

CNAMEHosts2._domainkey
<s2 target from SendGrid>Get this value from your provider's dashboard.

DKIM key 2

Steps

  1. In SendGrid open Settings → Sender Authentication → Authenticate Your Domain.
  2. Keep Use automated security on and copy the three CNAME records.
  3. Publish them and click Verify in SendGrid.

Good to know

  • Only add include:sendgrid.net to your root SPF record if you turned automated security off.
  • If your DNS host is Cloudflare, set the CNAMEs to DNS only (grey cloud).

Adding records at your DNS host

Cloudflare · Namecheap · GoDaddy · Amazon Route 53

Check your setup

After publishing, run the domain health check. DNS changes usually appear within minutes, but can take up to a few hours. Official reference: SendGrid documentation.