Skip to main content
ESP AUTHENTICATION GUIDESPF Lookups: 1 / 10DKIM Type: CNAMEBIMI: Supported

How to Set Up SPF & DKIM for HubSpot Marketing Email: DNS Authentication Guide

Configure authoritative DNS records for HubSpot Marketing Email. Prevent spoofing, maintain high inbox placement at Google & Yahoo, and verify alignment without exceeding RFC 7208 lookup limits.

Required DNS Records for HubSpot Marketing Email

1. Sender Policy Framework (SPF)
Type: TXT
Host / Name:@
Value / Content:
v=spf1 include:12345.spf01.hubspotemail.net ~all
Uses 1 of your domain's 10 allowed DNS lookups under RFC 7208. Do not add duplicate SPF TXT records.
2. DomainKeys Identified Mail (DKIM)
Type: CNAME
Selector / Host Name:hs1._domainkey
Target / Key Content:
yourdomain.com.hs1.hubspotemail.net
Delegates cryptographic signing to HubSpot Marketing Email. Alignment mode is set to relaxed.

Recommended DMARC Policy for HubSpot Marketing Email

Once both SPF and DKIM are verified on your domain, enforce DMARC to prevent attackers from sending unauthorized emails spoofing your brand:

v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourcompany.com; pct=100; aspf=r; adkim=r

Vendor Resources & RFC Standards

RFC 7208 (SPF)RFC 6376 (DKIM)RFC 7489 (DMARC)HubSpot Marketing Email Official Setup Guide
Live DNS & SPF Analyzer

Verify Your HubSpot Marketing Email SPF & DKIM Records in Real-Time

Test your authoritative domain now to check DNS lookup limits, evaluate DMARC alignment, and ensure 100% deliverability to Google and Microsoft inboxes.

Run SPF & DKIM Audit