Authenticate your verified sending domain with DMARC
If you're sending your ConvertKit emails via your own verified sending domain instead of our domain, you can add a DMARC record to it.
DMARC stands for "Domain-based Message Authentication, Reporting, and Conformance," and adding a DMARC record to your domain helps authenticate it.
As a result, you prevent others from spoofing your domain, i.e., sending emails that appear to come from your domain but actually don't.
Adding a DMARC record is also a requirement in situations like:
Complying with Gmail and Yahoo's email requirements if you send at least 5,000 emails a day
Here's how you can do so.
⚠️ IMPORTANT: Once you've added your DMARC record, please do not remove it—whether from ConvertKit or from your domain. Doing so may cause deliverability issues.
1. Get your DMARC record
NOTE: There are different types of DMARC records corresponding to different levels of authentication strictness. The default DMARC record we provide (i.e., "p=none") is the most permissive, but you can use a DMARC record with a different level of strictness if you believe this is the better option for your emails.
This tool can help you generate the appropriate DMARC record if you prefer not to use our default one.
We provide a default DMARC record you can use for manually adding a DMARC record to your verified sending domain. To access it, click your account name at the top right of the ConvertKit navigation, followed by Settings.
Then select Email in the account settings' left sidebar.
At the Verified Sending Domain section of the page, you will see the DMARC record for your domain:
Copy it to your clipboard.
NOTE: If you don't see your domain's DNS records, click the Show DNS records option next to its name.
On the other hand, if you don't see a DMARC record in the list of DNS records we provide (as shown in the screenshot below), this means you already have a DMARC record added to your domain.
Alternatively, if you haven't added a verified sending domain to your account yet, follow the steps here to do so.
2. Add the DMARC record to your domain
Next, log into your account with the platform whose nameservers your verified sending domain is pointed to and add the DMARC record to it.
This platform is responsible for directing visitors to your domain to the servers hosting the content they want to see. It is usually the domain provider from which you've bought the domain.
But if you've bought your domain from one platform and are hosting the website for that domain using another platform, you'll need to add the DMARC record via that other platform instead.
Adding the DMARC record involves creating, for your verified sending domain, a new TXT-type record containing the DMARC record values you've copied earlier.
The exact process will vary based on the platform you're adding the DMARC record to, and you can refer to these instructions for certain major platforms:
If your platform isn't listed here, try finding the instructions by searching for "Add TXT records to [your platform]" in your preferred search engine. Alternatively, contact the platform for help.
3. Validate your DMARC record
Your DMARC record may take 24 to 48 hours to take effect. At any time, you can check if it's working by going to the Email page in your ConvertKit account settings.
Click the Validate button for your verified sending domain.
A success icon will appear next to your domain if we've validated your DMARC record.
