Here's how to setup your email sending domain with SPF and DKIM records in HubSpot.
Your email sending domain gives HubSpot permission to send emails on your behalf. If you're planning on sending marketing emails from HubSpot, this setting is vital to ensure that your emails arrive in your contact's inbox.
As of February 2024, Google and Yahoo will require senders to implement email authentication via SPF, DKIM, and DMARC.
How to set up DKIM
How to find SPF and DMARC records
Each HubSpot portal has it's own SPF record generated. The record will look like this:
include:[HubID].spf##.hubspotemail.net
Depending on the email service you use, your DMARC may auto generate, but HubSpot will let you know if you need to add it. DMARC looks like the below:
v=DMARC1; p=none;
When you have completed the setup, the system will tell you if the setup is correct and connected or not:
In the instances when settings are not connected, you can go into the system and it will highlight what is missing:
For more details on SPF records in HubSpot click here.
What's next in the setup?
Once you have created the DKIM records and you have copied the SPF records, you will need to login to the platform where you host your email domain and add the records. We recommend speaking to your IT team for assistance with this.
Below is an example of how the DKIM would be added to GoDaddy:
This is an example of how the SPF would be setup in GoDaddy.
What is DMARC?
DMARC stands for Domain-based Message Authentication, Reporting and Conformance. This refers to the technical standard for email sending which ensures email senders and recipients are protected from advanced threats such as phishing and email spoofing. According to HubSpot, "For DMARC to pass, you need one of two domain authentication protocols, DKIM or SPF, to be set up correctly. If you don't have a dedicated IP, you should use the DKIM security protocol to ensure DMARC will pass."
Please Note: If you have not purchased a dedicated IP from HubSpot you will be required to setup BOTH authentication protocols.
What is DKIM?
DKIM stands for Domain Keys Identified Mail and is a form of authentication which is designed to confirm the authentication of the sender email. In other words, if the DKIM is not set up, your email host will likely flag the email as "forged" and your emails will automatically go into the Spam folder. For more details on DKIM setup click here.
What is SPF?
SPF (Sender Policy Framework) is a standard authentication method for email sending. Like the DKIM record, it's an added layer of protection for your domain, and helps prevent your outgoing messages from being marked as spam.