ESP AUTHENTICATION GUIDESPF Lookups: 1 / 10DKIM Type: TXTBIMI: Supported
How to Set Up SPF & DKIM for Salesforce Marketing Cloud: DNS Authentication Guide
Configure authoritative DNS records for Salesforce Marketing Cloud. Prevent spoofing, maintain high inbox placement at Google & Yahoo, and verify alignment without exceeding RFC 7208 lookup limits.
Required DNS Records for Salesforce Marketing Cloud
1. Sender Policy Framework (SPF)
Type: TXTHost / Name:@
Value / Content:
v=spf1 include:cust-spf.exacttarget.com ~allUses 1 of your domain's 10 allowed DNS lookups under RFC 7208. Do not add duplicate SPF TXT records.
2. DomainKeys Identified Mail (DKIM)
Type: TXTSelector / Host Name:sfmc._domainkey
Target / Key Content:
sfmc.domainkey.yourcompany.comDelegates cryptographic signing to Salesforce Marketing Cloud. Alignment mode is set to relaxed.
Recommended DMARC Policy for Salesforce Marketing Cloud
Once both SPF and DKIM are verified on your domain, enforce DMARC to prevent attackers from sending unauthorized emails spoofing your brand:
v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourcompany.com; pct=100; aspf=r; adkim=rVendor Resources & RFC Standards
DNS Infrastructure Guides
Deploy Salesforce Marketing Cloud Records on Your DNS Provider
Alternative Mail Vendors
Related Email Service Provider Guides
Live DNS & SPF Analyzer
Verify Your Salesforce Marketing Cloud SPF & DKIM Records in Real-Time
Test your authoritative domain now to check DNS lookup limits, evaluate DMARC alignment, and ensure 100% deliverability to Google and Microsoft inboxes.
Direct shortcut: Open free SPF 10-Lookup Counter →