--- title: "FreshMail DKIM & SPF Setup - A Complete Guide | DMARC Report" description: "FreshMail DKIM & SPF Setup - A Complete Guide from DMARC Report explains practical steps for email authentication, domain protection, deliverability, and." image: "https://dmarcreport.com/og/blog/freshmail-dkim-spf-setup-a-complete-guide.png" canonical: "https://dmarcreport.com/blog/freshmail-dkim-spf-setup-a-complete-guide/" --- Quick Answer If you send \[email marketing\](https://business.adobe.com/blog/basics/guide-to-email-marketing) campaigns using FreshMail, you already know how powerful and flexible the platform is. However, to ensure your emails actually reach the inbox and don’t get blocked, flagged as spam, or rejected outright, you need to authenticate your domain properly. That’s where SPF and DKIM come in - two critical email authentication protocols that work together with DMARC to protect your reputation and improve deliverability. Related: [Free DMARC Checker](/tools/dmarc-checker/) ·[How to Create an SPF Record](/tools/spf-record-generator/) ·[SPF Record Format](/blog/spf-format-checker-dos-and-donts-for-email-authentication/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Ffreshmail-dkim-spf-setup-a-complete-guide%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=FreshMail%20DKIM%20%26%20SPF%20Setup%20-%20A%20Complete%20Guide&url=undefined%2Fblog%2Ffreshmail-dkim-spf-setup-a-complete-guide%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Ffreshmail-dkim-spf-setup-a-complete-guide%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Ffreshmail-dkim-spf-setup-a-complete-guide%2F&title=FreshMail%20DKIM%20%26%20SPF%20Setup%20-%20A%20Complete%20Guide "Share on Reddit") [ ](mailto:?subject=FreshMail%20DKIM%20%26%20SPF%20Setup%20-%20A%20Complete%20Guide&body=Check out this article: undefined%2Fblog%2Ffreshmail-dkim-spf-setup-a-complete-guide%2F "Share via Email") ![FreshMail DKIM & SPF Setup - A Complete Guide](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) ## Try Our Free DKIM Lookup Auto-discover DKIM selectors for any domain - scan 185 common selectors across all major providers. [ Discover DKIM Selectors → ](/tools/dkim-lookup/) DKIM ([RFC 6376](https://datatracker.ietf.org/doc/html/rfc6376)) signs email messages cryptographically, and unlike SPF, the signature survives email forwarding - which is why DMARC alignment via DKIM is more reliable than SPF alignment for forwarded mail. > DKIM is the authentication protocol that survives email forwarding, says Brad Slavin, General Manager of DuoCircle. When SPF fails because a forwarder’s IP isn’t in the original record, DKIM alignment is the only path to DMARC pass. That’s why we monitor DKIM alongside SPF in every DMARC Report dashboard. If you send [email marketing](https://business.adobe.com/blog/basics/guide-to-email-marketing) campaigns using FreshMail, you already know how powerful and flexible the platform is. \_However, to ensure your emails actually reach the inbox and don’t get blocked, flagged as spam, or rejected outright, you need to authenticate your domain properly. \_That’s where SPF and DKIM come in - two critical \*\*email authentication protocols that work together with DMARC to protect your reputation and improve deliverability. In this comprehensive guide, we’ll walk you through everything you need to know about setting up DKIM and SPF with FreshMail - step by step, clearly explained, and written from the perspective of a team that lives and breathes email authentication: DMARCReport. ## Why DKIM & SPF Matter - The Foundation of Email Trust Before we dive into the steps, let’s take a moment to understand why SPF and DKIM are so important. ### 📌 What SPF Does SPF (Sender Policy Framework) allows domain owners to specify which mail servers are permitted to send email on behalf of that domain. When receiving [mail servers](https://www.cloudflare.com/learning/email-security/what-is-a-mail-server/) check SPF, they compare the \*\*sending server’s IP against the authorized list in your DNS. - If the server is authorized, the check passes. - If it isn’t, the check fails, and the email is more likely to be treated as spam. SPF strengthens your email domain’s reputation and prevents unauthorized use - such as spoofing or phishing. ### 📌 What DKIM Does DKIM (DomainKeys Identified Mail) applies a \*\*cryptographic signature to each outgoing message. This signature is published as a [public key](https://www.investopedia.com/terms/p/public-key.asp) in DNS, and receiving servers use it to verify the message wasn’t tampered with after it was sent. This ensures: - The message really came from you. - The content hasn’t been altered. - [Spam filters](https://www.techtarget.com/searchsecurity/definition/spam-filter) see your mail as more trustworthy. Both SPF and DKIM don’t just help email get delivered; they lay the groundwork for DMARC. DMARC then tells receivers what to do when SPF or DKIM checks fail. ![Dmarc check](https://media.mailhop.org/dmarcreport/images/2026/01/dmarc-check-6010.jpg) ## Step-by-Step: Setting Up DKIM for Your FreshMail Domain ### 🔹 Step 1 - Log In to Your FreshMail Account Begin by signing in to your \*\*FreshMail dashboard with your admin credentials. This gives you access to all necessary domain verification and settings. ### 🔹 Step 2 - Access Your Settings Panel Once logged in: - Click your profile icon in the top right corner. - Select Settings from the dropdown. _This takes you to your account and domain configuration options where authentication features are located_. ### 🔹 Step 3 - Open the DKIM Verification Section Inside settings: - Look for the “DKIM Verification” option in the menu (usually on the left side). - Click it to open the **DKIM setup interface**. ### 🔹 Step 4 - Authenticate a New Domain In the DKIM settings: - Select Authenticate new domain. - Enter the domain you want FreshMail to send emails from. For example: newsletter.yourdomain.com Once entered, click **Add**. ### 🔹 Step 5 - Fetch Your DKIM CNAME Record After adding the domain, FreshMail generates a **CNAME record** \- a DNS entry you’ll publish at your domain’s DNS host . You’ll see: - A Hostname (Name) value - A Target (Value) value Copy both exactly as they appear. 💡 This DKIM [CNAME record](https://www.ibm.com/think/topics/cname) is how [Mail Transfer Agents (MTAs)](https://www.smartlead.ai/blog/mail-transfer-agent-guide) verify your public key when processing messages from your FreshMail campaigns. ![Dmarc record](https://media.mailhop.org/dmarcreport/images/2026/01/dmarc-record-6010.jpg) ### 🔹 Step 6 - Add the DKIM Record to DNS Now log in to your **DNS provider** (for example, Cloudflare, GoDaddy, Namecheap, AWS Route 53, etc.) and: - Go to your **domain’s DNS settings**. - Click Add a record. - Choose the record Type: CNAME. - Paste the Hostname and Value exactly. - Save the record. 👉 If using Cloudflare - make sure the proxy status (orange cloud) is turned off (grey cloud) - proxies interfere with DKIM validation. Once published, [DNS propagation](https://www.digicert.com/faq/dns/what-is-dns-propagation) can take up to 24 hours. After propagation, FreshMail will show your domain as verified in the DKIM status. ## Step-by-Step: Setting Up SPF for FreshMail Unlike DKIM, SPF setup doesn’t require a generated CNAME. Instead, you update your domain’s SPF TXT record to authorize FreshMail servers to send on your behalf. ### 🔹 Step 1 - Understand FreshMail’s SPF Mechanism According to FreshMail guidance, the SPF mechanism you should include is: include:spf.freshmail.pl This tells receiving servers to include FreshMail’s sending servers when checking SPF for your domain. ### 🔹 Step 2 - Locate Your SPF Record in DNS Check your**DNS for an existing SPF record** \- it looks like a [TXT record](https://en.wikipedia.org/wiki/TXT%5Frecord) starting with: v=spf1 If you already have one, _do not create another_. Only one SPF record is allowed per domain. Instead, \*\*update it - more on that below. ### 🔹 Step 3 - Add FreshMail to Your SPF ✅ If you **don’t already have an SPF record**, create a new TXT record with: v=spf1 include:spf.freshmail.pl \~all 👉 This tells mail receivers that FreshMail’s servers are trusted for sending mail from your domain. 🔄 If you **already have an SPF record**, simply \*\*add the include within the existing list: v=spf1 include:spf.yourservice.com include:spf.freshmail.pl \~all Just be sure the updated SPF is **valid and not overly long** \- too many includes can cause DNS lookup limits to be exceeded. ### ⚠️ SPF Alignment Limitation It’s important to note that with FreshMail, SPF alignment cannot currently be achieved, meaning SPF may _pass_ without aligning with your “From” header domain. But DKIM will align once setup properly. Even so, including FreshMail in your SPF is still recommended to **reinforce authentication checks**. ![Dmarc record generator](https://media.mailhop.org/dmarcreport/images/2026/01/dmarc-record-generator-6010.jpg) ## What Happens After You Publish DKIM & SPF Once both records are in place and DNS has propagated: ### ✔️ You Should Begin Seeing - [DKIM signatures](https://docs.mapp.com/docs/dkim-signature) on outgoing emails validated by recipients. - SPF checks that include FreshMail as authorized senders. - DMARC reports showing DKIM passing for FreshMail email deliveries (once you have a DMARC record published). If you have an active **DMARC policy with reporting enabled** \- for example: v=DMARC1; p=none; rua=mailto:[dmarc-reports@yourdomain.com](mailto:dmarc-reports@yourdomain.com) You’ll start receiving \*\*daily aggregate reports that indicate how your email streams perform in terms of SPF, DKIM, and overall DMARC compliance. ## How Do You Verify Your Setup - Best Practices? ### \*\*🔍 Use Tools to Validate After publishing [DNS records](https://www.indusface.com/learning/dns-records/): - Check DKIM via tools like DKIMValidator or MXToolbox DKIM check. - Validate SPF with an SPF checker. - Confirm DMARC performance with a DMARC analytics service. These will help you catch misconfigurations before they affect deliverability. ### 📊 Watch for SPF Lookup Limits If you use many third-party services that send mail for you, you could hit the **the SPF 10-lookup limit ([RFC 7208 - Sender Policy Framework (SPF)](https://datatracker.ietf.org/doc/html/rfc7208)) for SPF**. If that happens, consider mechanisms to optimize (e.g., flattening, consolidating includes). DMARCReport can help you audit and optimize your SPF record.![Create dmarc record](https://media.mailhop.org/dmarcreport/images/2026/01/create-dmarc-record-6010.jpg) ## Final Thoughts [Email authentication](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/) isn’t just good practice - it’s essential. For brands and marketers using FreshMail, setting up DKIM and SPF properly ensures: - Higher deliverability - Fewer emails sent to spam - Stronger protection against impersonation - Better DMARC monitoring and enforcement At [DMARCReport](https://dmarcreport.com/), we believe every sender should understand and leverage SPF, DKIM, and DMARC as part of a robust [email security](https://dmarcreport.com/blog/why-email-security-matters-and-how-to-get-it-right/) strategy. If you need help monitoring your records or interpreting DMARC reports automatically, our platform can give you actionable **insights and performance dashboards**. ## Topics [ dkim ](/tags/dkim/)[ DMARC ](/tags/dmarc/)[ dmarc record ](/tags/dmarc-record/)[ dns record ](/tags/dns-record/)[ email security ](/tags/email-security/)[ SPF ](/tags/spf/) ![Vishal Lamba](https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg) [ Vishal Lamba ](/authors/vishal-lamba/) Content Specialist Content Specialist at DMARC Report. Writes vendor-specific email authentication guides and troubleshooting walkthroughs. [LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) ## Take control of your DMARC reports Turn raw XML into actionable dashboards. Start free - no credit card required. [Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) ## Related Articles [ Foundational 14m Add TXT Record on Namecheap (SPF, DKIM & DMARC) - 2026 Mar 5, 2025 ](/blog/add-txt-record-on-namecheap-a-complete-dns-guide/)[ Foundational 12m Adding SPF Records To Your Domain For Outlook Email Authentication Sep 25, 2025 ](/blog/adding-spf-records-to-your-domain-for-outlook-email-authentication/)[ Foundational 9m Answering Your Webinar Questions: Email Security - From The Desk Of DMARCReport Dec 2, 2025 ](/blog/answering-webinar-questions-email-security-dmarcreport-desk-insights-guide/)[ Foundational 10m Best Tools For Generating DMARC Records For Small Businesses With Minimal It Staff? Nov 28, 2025 ](/blog/best-tools-for-generating-dmarc-records-for-small-businesses-without-it-staff/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"FreshMail DKIM & SPF Setup - A Complete Guide","description":"FreshMail DKIM & SPF Setup - A Complete Guide from DMARC Report explains practical steps for email authentication, domain protection, deliverability, and.","url":"https://dmarcreport.com/blog/freshmail-dkim-spf-setup-a-complete-guide/","datePublished":"2026-01-08T08:51:16.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2026-01-08T08:51:16.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://dmarcreport.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes DMARC Report's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF and DMARC errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/freshmail-dkim-spf-setup-a-complete-guide/"},"articleSection":"foundational","keywords":"dkim, DMARC, dmarc record, dns record, email security, SPF","wordCount":1305,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg","caption":"FreshMail DKIM & SPF Setup - A Complete Guide","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"FreshMail DKIM & SPF Setup - A Complete Guide","item":"https://dmarcreport.com/blog/freshmail-dkim-spf-setup-a-complete-guide/"}]} ```