DNS Configuration Guide

Step-by-step instructions for adding DMARC, SPF, and DKIM records to your domain

Understanding DNS Record Types

TXT Records

TXT records hold text information for sources outside your domain. DMARC, SPF, and DKIM all use TXT records to publish their policies and keys.

Record Components

  • Name/Host: Where the record is located (e.g., @ for root, _dmarc for DMARC)
  • Type: Always TXT for email security records
  • Value: The actual record content
  • TTL: Time to Live (how long DNS servers cache the record)

Adding a DMARC Record

Publish your DMARC policy at _dmarc.yourdomain.com

Name/Host: _dmarc
Type: TXT
Value: v=DMARC1; p=none; rua=mailto:reports@yourdomain.com
TTL: 3600 (or default)

Steps:

  1. Log into your DNS provider's control panel
  2. Find the DNS management or DNS records section
  3. Click "Add Record" or "Add DNS Record"
  4. Select TXT as the record type
  5. Enter "_dmarc" as the name/host (some providers require "_dmarc.yourdomain.com")
  6. Paste your DMARC record value
  7. Set TTL to 3600 or leave as default
  8. Save the record

Adding an SPF Record

Authorize mail servers at your domain root

Name/Host: @ (root domain)
Type: TXT
Value: v=spf1 include:_spf.google.com ~all
TTL: 3600 (or default)

Steps:

  1. Log into your DNS provider's control panel
  2. Find the DNS management section
  3. Look for an existing SPF record (there can only be ONE)
  4. If one exists, edit it; if not, add a new TXT record
  5. Enter "@" as the name/host (or leave blank for root)
  6. Paste your SPF record value
  7. Save the record

Adding DKIM Records

Publish DKIM public keys for email signing

Name/Host: selector._domainkey
Type: TXT
Value: v=DKIM1; k=rsa; p=MIGfMA0GC...
TTL: 3600 (or default)

Steps:

  1. Get your DKIM record from your email provider (Google Workspace, Microsoft 365, etc.)
  2. Note the selector name (e.g., "google", "k1", "default")
  3. Log into your DNS provider's control panel
  4. Add a new TXT record
  5. Enter "selector._domainkey" as the name (replace "selector" with your actual selector)
  6. Paste the DKIM record value provided by your email provider
  7. Save the record

Provider-Specific Guides

DNS Propagation

After adding DNS records, changes need time to propagate across the internet. This process typically takes:

  • 5-30 minutes for most changes
  • Up to 24-48 hours for complete global propagation
  • Faster with lower TTL values (300-3600 seconds)

Common Issues