SPF and DKIM by provider

Find the platform that sends your mail and copy the records you publish for it.

Last updated 25 Oct 2026

Sending through more than one of these? Combining SPF includes for several senders keeps the record under ten lookups.

Mailbox platforms

The platform your people send from. Its include usually comes first in the record, and it signs most of your mail.

Google Workspace mail for your users, plus anything relayed through its SMTP relay Microsoft 365 mail from Exchange Online mailboxes and anything else sending through your tenant GoDaddy mail from its own email products, and hosts the DNS zone that other platforms' records land in Fastmail mail for your users on your own domain Zoho Mail mail for your users, hosted on Zoho's servers

Application and transactional mail

APIs and SMTP relays for receipts, password resets and notifications. Find the setting that signs mail with your own domain.

SendGrid transactional and marketing mail through its API and SMTP relay Postmark transactional email over its API or SMTP Amazon SES everything from application mail to bulk campaigns Mailgun application mail over its API or SMTP Mailjet campaigns and transactional mail Mailchimp Transactional application and transactional mail through the Mandrill API or SMTP

Campaigns and newsletters

Bulk senders that usually set a return path of their own, so your mail aligns through DKIM. Turn DKIM on before the first send.

Mailchimp campaigns and automations from your audience HubSpot marketing email, sequences and workflow notifications Klaviyo ecommerce campaigns and flows Brevo campaigns, automations and transactional mail Campaign Monitor campaigns and automated email to your subscriber lists Constant Contact campaigns and automated email from your contact lists

Support, sales and billing tools

Each one mails your customers from your address. They're often the senders you didn't expect to find in your DMARC reports.

Zendesk ticket notifications and agent replies from your support address Salesforce workflow, case and list email from Sales Cloud and Service Cloud Intercom product messages, campaigns and inbox replies Stripe invoices, receipts and failed payment notices to your customers

Some providers generate their values per account. For those, we point you to the provider's own screen and print no guess. A wrong SPF include lets servers you don't use pass SPF for your domain, and I'd rather print nothing than that.

Elsewhere on the site

Bounce and error codes The literal string from your log, and what to change. Guides Setup, alignment, aggregate reports and the ten-lookup limit.

Or check a domain right now with the free DMARC, SPF and DKIM lookups.

Hear about a failing sender the day it fails

The reports show which of your senders still pass once real mail goes out. We mail you that list each Monday and, on a paid plan, email you the day a sender stops passing.

Get the weekly digest

Free for your first domain · No card · Per-source totals kept for life